
Dual VLAN/Network with 2 Gateways
Imagine a scenario very similar to the one described in Dual VLAN/Network, but the
internal network
is also able to
route to the Internet:
As far as Equalizer is concerned, the configuration doesn't have to change at all from the previous scenario. There
is still a single destination network (the Internet), and Equalizer is statically configured to use the 10.0.0.0 network
to communicate with this destination network.
The administrator can set up the servers on the 192.168.211.0 network to use their router when sending packets to
the Internet, and to use the Equalizerwhenever sending packets to clients. However, in order to do this on a server,
the administrator would need to statically define which portions of the Internet should use which gateway (the
router or the Equalizer). This can be configured very simply on Equalizer, instead:
eqcli > vlan internal subnet net default_route 192.168.211.2 eqcli: 12000287:
Operation successful
This command adds a default route for the
internal
network that is different than the external default route. This
means that any traffic coming from the internal network will be source routed through the 192.168.211.2 gateway,
while any other traffic will still be routed through the 10.0.0.254 gateway as configured for the
external
network.
This can be verified by looking at the show sbr output:
Copyright © 2013 Coyote Point Systems. A subsidiary of Fortinet, Inc.
All Rights Reserved.
89
Equalizer Administration Guide
Kommentare zu diesen Handbüchern