7102dl - 2 Wan and 2 Lan

[Paulo Prior]

Hi all, i have a 7102dl Secure router with 2 ADSL modules using 2 diferent ISP and 2 lan segments 192.168.0.0 and 192.168.1.0.

I want to use the router to:
- Router between Lan1 and Lan2
- Route Lan1 internet traffic to Wan1
- Router Lan2 internet traffic to Wan2
- Lan2 as a Web Server and fwd port 80 from Wan2 to it.
- In case of 1 ADSL faillure, Lan 1 and Lan2 should use the the other ADSL line.

Is this possible?
How should I start?

I´ve manage to do some of this. The routing between lan´s, the web server and the separate internet connections.

Thanks in advance.

Paulo

[Mohieddin Kharnoub]

Hi

Your configuration is possible by using Policy Based Routing (Traffic Egnineering).

How should you start:
- Router between Lan1 and Lan2: finish this, its easy.

- Route Lan1 internet traffic to Wan1 - Router Lan2 internet traffic to Wan2:
This can be done by using Route Maps, which allow you to create a series of maps to direct the traffic, then apply it on a particular interface.

Read this in the following link ch13, Policy based routing:
ftp://ftp.hp.com/pub/networking/software/A-C13-Adv_Routing.pdf

- Lan2 as a Web Server and fwd port 80 from Wan2 to it:
This is easy, open the router web interface > fro mthe firewall select security zones > select publis interface > click add policy > in this page you can so this.

- In case of 1 ADSL faillure, Lan 1 and Lan2 should use the the other ADSL line:
You should configure the second ADSL WAN link as a backup line, read this:
ftp://ftp.hp.com/pub/networking/software/A-C03-Backup.pdf

If you need more details, you are welcome :)

Good Luck !!!

[Paulo Prior]

Thanks for the tips Mohieddin!
I've managed to do some of this.. in 6 hours...

- Router between Lan1 and Lan2:
For the routing between Lan's I add a rule for private in the firewall to allow that traffic and it's done.

- Route Lan1 internet traffic to Wan1
- Router Lan2 internet traffic to Wan2
For the internet use I managed to route web browsing and others to the fastest ADSL connection and the e-mail to the slowest.
It's even better now!

- Lan2 as a Web Server and fwd port 80 from Wan2 to it:
Both external IP's have access to the web server, nice...

- In case of 1 ADSL faillure, Lan 1 and Lan2 should use the the other ADSL line:
This is the problem... All I've managed is to create rules and if one ADSL fails I've to put that rule up in the Router priority
:(

I've tried load-sharing but if the nat points to ppp1 or ppp2 I've internet access, if I point it to 0.0.0.0 no internet!

How can I share internet inside the LAN´s with load-sharing?

Thanks in advance.

Paulo

[Mohieddin Kharnoub]

Hi

For load sharing you can see page page 120 on this link :
ftp://ftp.hp.com/pub/networking/software/A-C13-Adv_Routing.pdf

I think you can do it also by route maps and traffic engineering.

Share us what you have done :)

Good Luck !!!

[Paulo Prior]

OOOPS!!!

I have a big problem... putting the internet address in the browser I can not access my internal web server, only using the internal address.

From the outside all is OK.

This is related to loopback?
How can I fix this?

HHHHELP! My boss is going to kill me...

Paulo

[Mohieddin Kharnoub]

Hi

How you want to access the server and you are inside the network using and external address ?
You address will be Natted remember.

From inside you should use the internal address, and from outside the outside address.

Good Luck !!!

[Paulo Prior]

Yes... and no...

The internal website was developed by an outside company that uses the ip address in the open link. So if an internal user hits the link on the primary website it will open http://213.xxx.xxx.xxx not http://192.168.1.2

This cannot be changed! And I´ve managed to do this on another time with a similar router... just dont remember...

I believe if I createis a rule when someone inside the LAN wants ip 213.x.x.x it forwards it to 192.168.1.2. But doesn't work...

Paulo

[Mohieddin Kharnoub]

Hi

If you are still doing this using the ProCurve router, go to the Web interface > security zone > private > click on add policy to private > select 1:1 NAT , then fill in the public and private ip address .
Or you can use the Advance one.

Good Luck !!!