sopov писал(а):Так а смысл нескольких брасов в одном бродкаст домене с разными именами служб? Вы же лишаетесь таких плюшек как распределение нагрузки и резервирование.
Так как раз в этом задача и состоит.. Не получается. Вобщем есть два инет-коннекта, один оптический с внешним статическим ипом, и адсл с серым 192.168.137.*. пытался сделать по аналогии с
http://abills.net.ua/wiki/doku.php/abil ... er:2way:ru, с езернет-ипами работает, с "впн" - рисует болты. Да и как бы баласировка не особо нужна, нужно просто натить один пул на один канал, другой на другой.
int_if="igb1"
ext_if="igb0"
ext_if2="vlan137"
internal_net0="10.0.0.0/24"
external_addr="6*.1**.4*.2**"
internal_addr="10.0.0.254"
ext_gw="6*.1**.4*.2**"
ext_gw2="192.168.137.1"
vpn_net="172.16.0.0/16"
set optimization normal
set block-policy drop
scrub in all
nat on $ext_if from $vpn_net to any -> ($ext_if)
nat on $ext_if from 10.0.0.244 to any -> ($ext_if)
nat on $ext_if from 10.0.0.248 to any -> ($ext_if)
nat on $ext_if from 10.0.5.73 to any -> ($ext_if)
nat on $ext_if from 10.0.0.252 to any -> ($ext_if)
nat on $ext_if from 192.168.121.0/24 to any -> ($ext_if)
nat on $ext_if from 10.0.0.36 to any -> ($ext_if)
nat on $ext_if from 10.0.0.247 to any -> ($ext_if)
nat on $ext_if from 10.0.0.245 to any -> ($ext_if)
nat on $ext_if from 10.0.0.246 to any -> ($ext_if)
nat on $ext_if from 10.0.0.109 to any -> ($ext_if)
nat on $ext_if from 10.0.0.44 to any -> ($ext_if)
nat on $ext_if from 10.0.0.251 to any -> ($ext_if)
nat on $ext_if from 10.0.0.237 to any -> ($ext_if)
nat on $ext_if from 10.0.0.25 to any -> ($ext_if)
nat on $ext_if from 10.0.5.79 to any -> ($ext_if)
nat on $ext_if from 10.0.0.239 to any -> ($ext_if)
nat on $ext_if from 10.0.0.221 to any -> ($ext_if)
nat on $ext_if from 10.0.0.232 to any -> ($ext_if)
nat on $ext_if from 10.0.0.233 to any -> ($ext_if)
nat on $ext_if from 10.0.0.234 to any -> ($ext_if)
nat on $ext_if from 10.0.0.222 to any -> ($ext_if)
nat on $ext_if from 10.0.5.0/24 to 178.208.83.28 -> ($ext_if)
nat on $ext_if2 from 192.168.102.0/24 to any -> ($ext_if2)
nat on $ext_if from 192.168.102.0/24 to any -> ($ext_if)
nat on $ext_if2 from 192.168.122.3 to any -> ($ext_if2)
nat on $ext_if from 10.0.2.2/32 to any -> ($ext_if)
nat on $ext_if from 10.0.3.2/32 to any -> ($ext_if)
rdr on $ext_if proto tcp from any to $external_addr port 25025 -> 10.0.0.234 port 25025
pass in all
block in on $int_if from 192.168.122.3 to any
block out on $ext_if
block out on $ext_if2
pass in on $int_if route-to \
{ ($ext_if2 $ext_gw2) } round-robin \
proto tcp from 192.168.122.3 to any modulate state
pass in on $int_if route-to \
{ ($ext_if2 $ext_gw2) } round-robin \
proto { udp, icmp } from 192.168.122.3 to any keep state
pass out on $ext_if proto tcp from any to any flags S/SA modulate state
pass out on $ext_if proto { udp, icmp } from any to any keep state
pass out on $ext_if2 proto tcp from any to any flags S/SA modulate state
pass out on $ext_if2 proto { udp, icmp } from any to any keep state
pass in on $ext_if proto tcp from any to ($ext_if) port ssh \
flags S/SA keep state \
(max-src-conn-rate 3/30, overload <ssh-brut> flush global)
block drop in quick on $ext_if from <ssh-brut>
pass out on $ext_if route-to ($ext_if2 $ext_gw2) from $ext_if2 to any
pass out on $ext_if2 route-to ($ext_if $ext_gw) from $ext_if to any
вобщем, с таким конфигом ситуация следующая: с 192.168.122.3 пакеты доходят до 192.168.137.1 а дальше - болт на восемь.
Где моя ошибка?