LinuxQuestions.org
Latest LQ Deal: Latest LQ Deals
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Networking
User Name
Password
Linux - Networking This forum is for any issue related to networks or networking.
Routing, network cards, OSI, etc. Anything is fair game.

Notices


Reply
  Search this Thread
Old 01-29-2014, 12:49 PM   #1
SEE_Arrow
LQ Newbie
 
Registered: Jan 2014
Posts: 2

Rep: Reputation: Disabled
Failover routing


We have an asterisk pbx running on Centos 5.8

We are in the process of connecting to a cloud provider for call center functionality. Our current connectivity model is to have an mpls connection as our primary route for sip trunking and an IPSEC tunnel over our internet connection as the secondary path. On our firewall we have bgp configured for failover. Our cloud provider has required separate ip addresses for each path. I have provided them with the following ip addresses for them to route to the pbx:

10.100.0.107 - MPLS
10.100.0.110 - IPSEC
10.100.0.104 is our firewall

They have only provided one ip address for us to route to(216.xxx.xxx.111) and they have restricted the access to each path based on the above ip addresses because they set static routes on their end.

On my pbx the route to 216.xxx.xxx.111 goes to our firewall(10.100.0.104) with a source address of 10.100.0.107. This works when the MPLS connection is up. When the MPLS connection goes down, bgp routes the traffic to 216.xxx.xxx.111 via our IPSEC tunnel. The IPSEC tunnel won't accept the traffic because the source address 10.100.0.107 is not allowed. If I change the src address of the route to 10.100.0.110 then it works.

The default route on the pbx is set to have 10.100.0.110 as the source.

When the mpls ciruit goes down, is there a way to get the server to use the default route instead of the route to 216.xxx.xxx.111?

I'd like to avoid using scripts to monitor. I am not a networking expert, so I'm hoping I am missing an easy solution.

Please let me know if I have been unclear or left out any pertinent details.

Thank you.
 
Old 02-12-2014, 02:59 PM   #2
SEE_Arrow
LQ Newbie
 
Registered: Jan 2014
Posts: 2

Original Poster
Rep: Reputation: Disabled
Here are the relevant routes:

10.100.0.96/28 dev eth1 proto kernel scope link src 10.100.0.110
216.xxx.xxx.0/23 via 10.100.0.104 dev eth1 src 10.100.0.107
default via 10.100.0.104 dev eth1 src 10.100.0.110

When bgp switches to use the ipsec tunnel, the sip trunks go down because the src 10.100.0.107 is not allowed over the ipsec tunnel. Right now I have to manually delete the 216.xxx.xxx.0/23 route so that the traffic uses the default route with a src of 10.100.0.110.

I also forgot to mention that 10.100.0.107 and .110 are both virtual ip addresses for the same interface:

eth1 Link encap:Ethernet HWaddr 38:60:77:9C:14:71
inet addr:10.100.0.105 Bcast:10.100.0.111 Mask:255.255.255.240
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:1110382 errors:0 dropped:0 overruns:0 frame:0
TX packets:1028812 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:288420586 (275.0 MiB) TX bytes:235574633 (224.6 MiB)
Interrupt:169 Memory:fe400000-fe420000

eth1:0 Link encap:Ethernet HWaddr 38:60:77:9C:14:71
inet addr:10.100.0.107 Bcast:10.100.0.111 Mask:255.255.255.240
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
Interrupt:169 Memory:fe400000-fe420000

eth1:1 Link encap:Ethernet HWaddr 38:60:77:9C:14:71
inet addr:10.100.0.110 Bcast:10.100.0.111 Mask:255.255.255.240
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
Interrupt:169 Memory:fe400000-fe420000
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Mutiple IPs and network cards routing (source policy routing?) shogun1234 Linux - Networking 1 01-17-2013 12:09 AM
Dynamic routing isn't done; static routing works for about 2 seconds for wireless gregorian Linux - Networking 7 02-19-2010 06:43 AM
OVH failover ip routing problem fscholz Linux - Networking 0 08-14-2009 10:51 AM
failover routing firsttux Linux - Networking 1 01-24-2006 03:21 PM
Routing Level Failover terminaljunkie Linux - Networking 4 04-22-2003 09:29 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Networking

All times are GMT -5. The time now is 01:35 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration