diff --git a/docs/MultiISP.xml b/docs/MultiISP.xml index d685bcb5b..27d205782 100644 --- a/docs/MultiISP.xml +++ b/docs/MultiISP.xml @@ -464,8 +464,8 @@ - For those of you who are terminally confused between track and For those of you who are terminally confused + between track and balance: @@ -532,8 +532,8 @@ and any interfaces that do not have an IPv4 configuration. You should also omit interfaces like tun interfaces that are created dynamically. Traffic to networks handled by - those interfaces should be routed through the main table using entries in - /etc/shorewall/route_rules (see Example 2 /etc/shorewall/route_rules (see Example 2 below). In addition: @@ -965,8 +965,8 @@ gateway:~ #Note that because we used a priority of 1000, the OpenVPN (routed setup w/tunX) in combination with multiple providers. In this case you have to set up a rule to ensure that the OpenVPN traffic is routed back through the tunX interface(s) rather than - through any of the providers. 10.8.0.0/24 is the subnet chosen in - your OpenVPN configuration (server 10.8.0.0 255.255.255.0). + through any of the providers. 10.8.0.0/24 is the subnet chosen in your + OpenVPN configuration (server 10.8.0.0 255.255.255.0). #SOURCE DEST PROVIDER PRIORITY - 10.8.0.0/24 main 1000 @@ -1034,6 +1034,12 @@ gateway:~ #Note that because we used a priority of 1000, the Blarg 1 1 main eth0:206.124.146.176 206.124.146.254 ... Avvanta 2 2 main eth0:130.252.144.8 130.252.144.254 ... + + If the firewall's address is the same for both providers, you + must specify the loose option on both + providers. + + /etc/shorewall/masq:#INTERFACE SOURCE ADDRESS eth0(Blarg) 130.252.144.8 206.124.146.176 eth0(Avvanta) 206.124.146.176 130.252.144.8 @@ -1129,4 +1135,4 @@ linksys 1 1 - wlan0 172.20.1.1 track,balance=1,optional shorewall 2 2 - eth0 192.168.1.254 track,balance=2,optional/etc/shorewall/rules:#SOURCE DEST PROVIDER PRIORITY - - shorewall 11999 - + \ No newline at end of file