Forum Discussion
faycal_29095
Nimbostratus
NimbostratusVirutal Server for VPN
hi everybody;
i create a Virtual server, type standard (0.0.0./0) for VPN use (UDP 500).
but i see only some packet in this VS.
please, can you help me to understand where exactly can w...
faycal_29095Nimbostratus
Nimbostratusi will axplain you my situation.
First we had one ISP, and we have also some internal server that need to be Snated to IPs from ISP01.
we created a VS Wildcard 0.0.0.0/0, all protocols; and we apply this Irule :
when LB_SELECTED {
if { [IP::addr [IP::client_addr] equals 172.24.95.139 ] } {
snat 196.1.1.1
} elseif { [IP::addr [IP::client_addr] equals 172.24.95.133 ] } {
snat 196.1.1.2
} elseif { [IP::addr [IP::client_addr] equals 172.24.95.135 ] } {
snat 196.1.1.3
} else {
snat automap
}}
Now we integrated a second link ISP02. and we would like to load balande traffic in the two ISP. But not for VPN and for the internal servers that must be Snated; for these two cases, the trafic must go through ISP01.
we think that by creating another VS dedicated for VPN traffic; we can resolve this issue. so we can keep the VS wildcard forwarding IP with the IRULE as below:
when LB_SELECTED {
if { [IP::addr [IP::client_addr] equals 172.24.95.139 ] } {
snat 196.1.1.1
pool pool_ISP01
} elseif { [IP::addr [IP::client_addr] equals 172.24.95.133 ] } {
snat 196.1.1.2
pool pool_ISP01
} elseif { [IP::addr [IP::client_addr] equals 172.24.95.135 ] } {
snat 196.1.1.3
pool pool_ISP01
} else {
snat automap
pool pool_gateway_ISPs
}}
but my problem now is what kind of VS for VPN trafic must i create? and how to configure it to support all trafic of VPN ?
i hope that you understund my case and i thank you in advance to help me.
