Hi all,
To the point, I've configured ERPOE 5 - v1.9.0 for this guide, little problem for global name-server google dns, because in my ISP blocking this dns. But so far running well.
And now, I want to try to reconfigure with reference > One LAN1 to WAN1, LAN2 to WAN2 with fail-over - link, can it work?.
This current config load-balance:
group G { interface eth1 { route-test { initial-delay 60 interval 10 type { ping { target 8.8.8.8 } } } weight 50 } interface pppoe0 { route-test { initial-delay 60 interval 10 type { ping { target 8.8.8.8 } } } weight 50 } lb-local enable sticky { dest-addr enable dest-port enable source-addr enable } }
Firewall modify:
modify balance { rule 10 { action modify description "do NOT load balance lan to lan" destination { group { network-group PRIVATE_NETS } } modify { table main } } rule 20 { action modify description "do NOT load balance destination public address" destination { group { address-group ADDRv4_pppoe0 } } modify { table main } } rule 30 { action modify description "do NOT load balance destination public address" destination { group { address-group ADDRv4_eth1 } } modify { table main } } rule 70 { action modify modify { lb-group G } } }
My setup plan:
- 192.168.10.254/24 > office1 LAN (eth2)
- 192.168.3.1/24 > guest (eth2.vlan.20)
- 192.168.2.1/24 > office2 LAN (eth3)
- eth0 WAN1 (pppoe0/private) office1, guest primary
- eth1 WAN2 (dhcp/public) office2 primary
- eth2 office1 LAN/WIFI
- eth2.vlan.20 guest WIFI
- eth3 office2 LAN/WIFI
I try to draw conclusions for the command cli like this:
Load balance:
configure
set load-balance group OFFICE_1 interface pppoe0
set load-balance group OFFICE_1 interface eth1 failover-only
set load-balance group OFFICE_2 interface pppoe0 failover-only
set load-balance group OFFICE_2 interface eth1
commit
Firewall modify:
set firewall modify OFFICE1_POLICY rule 10 action modify
set firewall modify OFFICE1_POLICY rule 10 modify lb-group OFFICE1
set firewall modify OFFICE2_POLICY rule 10 action modify
set firewall modify OFFICE2_POLICY rule 10 modify lb-group OFFICE2
commit
Policy to interface:
set interfaces ethernet eth2 description "Office1 LAN
set interfaces ethernet eth2 firewall in modify OFFICE1_POLICY
set interfaces ethernet eth3 description "Office2 LAN"
set interfaces ethernet eth3 firewall in modify OFFICE2_POLICY
commit;save;exit
Please correct me.., i appreciate for your help.
Thank you.