Second WAN Interface / Routing Question


#1

Hi,

i have a fairly simple config with eth0 as WAN interface and eth1 as LAN interface.
Packets are going out to the default gateway IP of interface eth0
set protocols static route 0.0.0.0/0 next-hop a.x.y.z

Now i did setup eth2 as a second WAN interface. I can ping the gateway IP of that wan interface (of course).
The first basic thing i want to do is:
How can i configure vyOS that ICMP Packets coming in on eth2 are replied on eth2 and not on eth0?

Thanks,
Michael


#2

If you ping the IP of eth2 the reply will come from that interface. The issue you describe above is however route based. Your pkg comes in on eth2 and is supposed to be route to a host via let’s say eth3. Your default route goes via eth0. Your host will receive that pkg and will reply, the reply comes in on eth3. Since the destination network is not a local reachable network/ip it gets route via default route and will leave therefore on eth0.
If you know the destination networks you can set routes so for the defined networks/host it will always leave via eth2. Or you can use a routing table (aka policy based routing) and define the src ips who are supposed to always send traffic out via eth2. Everything else would involver NAT which would probably work as you want it, but the IP of the request will be only known to the firewall and needs to be terminated there as well.
cheers