How to send traffic with different port destination addresses to different gateways?

[Gulamo Sulemangi]

Hello all,

I am trying to direct traffic to different gateways (I will have 2) depending on the destination TCP port that the packets have (the packets all have the same destination IP address). Does anyone know of a way to this in a HP9000 running HP-UX?

Thanks for any help.

[U.SivaKumar_2]

Hi,
For this you have to use Layer 7 switches or appliance.
Other than this i dont see any way to acheive it.
regards,
U.SivaKumar

[Paul R. Dittrich]

You've described a firewall.

"Traffic from THIS source address, using THIS port or protocol, goes to gateway A."

"Traffic from THIS source address, using THAT port or protocol, goes to gateway B."

Unfortunately, I'm not aware of any firewalling software that's already been ported to HP-UX.

Paul

[Gulamo Sulemangi]

I don't know if it changes anything, but the packets I want to direct are packets originating from the HP9000 itself.

[Stanley Merkx]

You could take a look at IPFilter (B9901AA) on software.hp.com.

Not quite sure how it works on outgoing traffic though.

You should be able to configure it for this kind of functionality...

Stanley.

[Ron Kinner]

Buy yourself a cheap Cisco router that can do policy routing. Lots of them available used since the dot com bust.

Ron

[sven verhaegen]

there is a way , however most people dont like it , it requires weighted routes to different networks , that requires tyou to run a roiuting protocol on th eHP-UX something like OSPF or RIP , unfortunately that is complex to setup and it requires a lot of knowledge on the network itself and the RIP or OSPF implementation , i suppose you want to direct traffic out of on interface to any of number of gateway routers , you cannot have more then one default gateway active at the same time in HP-Ux so you always will need additional SW that redirect the packets on top of thenetwork stack or otherwise wou need to configure the routers to only allow dat from you machine to specific networks and make a 'generic' default route , that is a default gateawway pointin to your own lancard IP not a router IP , it just flushes the packets and the routers are responsible to picking it up an forwarding it , a combination of this and the acces list on the routers could work then...
hope
this helps

[Christopher Caldwell]

I'm with Ron. The policy route on a Cisco is the "easiest" way I can thing of to get this done.