Quantcast
Viewing all articles
Browse latest Browse all 20028

Static route not working

Hey guys so I am still new to Ubiquiti I am trying to rap my head around the following not working

 

we have a EdgeMax PRO two ISP first one is on eth1(copper) and second eth7 (Fibre)

I want to Failover both of them to my LAN bridge which is on eth6 (Fibre) 

 

I have attempted to follow this guide 

https://help.ubnt.com/hc/en-us/articles/204952274-EdgeMAX-Policy-based-routing-source-address-based-

 

I cannot seem to see where I am going wrong and why it is not working, when I connect the second line we start getting packets dropping on the VLANS like its not being routed correctly 

 

some help would be greatly appreciated I have been pulling my hair out for the past 4 days since the second ISP was installed.

 

IP Route Table for VRF "default"                                                
S     > 0.0.0.0/0 [1/0] via 81.***.***.*** inactive                             
     *>           [1/0] via 80.***.***.***, eth7                                
C    *> 80.***.***.***/28 is directly connected, eth7                           
C    *> 127.0.0.0/8 is directly connected, lo                                   
C    *> 192.168.1.0/24 is directly connected, br1                               
IPv4 Firewall "VLAN_IN":                                                        
 Active on (eth6.10,IN) (br2.2,IN) (br10,IN) (br10.10,IN)                       
rule  action   proto     packets  bytes                                         
----  ------   -----     -------  -----                                         
1     accept   all       0        0                                             
  condition - saddr 192.168.10.1 match-set ROUTER_IP dst                        
2     accept   all       0        0                                             
  condition - saddr 172.16.0.0/22 match-set ROUTER_IP dst                       
3     drop     all       0        0                                             
  condition - saddr 172.16.0.0/22 match-set VLAN_NETS dst                       
4     drop     all       0        0                                             
  condition - saddr 192.168.10.0/24 match-set VLAN_NETS dst                     
10000 accept   all       0        0                                             
--------------------------------------------------------------------------------
IPv4 Firewall "VLAN_IN2":                                                       

 Active on (eth6.2,IN) (br2,IN)                                                 
                                                                                
rule  action   proto     packets  bytes                                         
----  ------   -----     -------  -----                                         
1     drop     all       0        0                                             
  condition - saddr 172.16.0.0/22 daddr 192.168.1.0/24                          
                                                                                
10000 accept   all       0        0                                             
                                                                                
--------------------------------------------------------------------------------
IPv4 Firewall "WAN_IN":                                                         
                                                                                
 Active on (eth1,IN) (eth7,IN)                                                  
                                                                                
rule  action   proto     packets  bytes                                         
----  ------   -----     -------  -----                                         
3     accept   all       83702    106770705                                     
  condition - state RELATED,ESTABLISHED                                         
                                                                                
4     drop     all       0        0                                             
  condition - state INVALID                                                     
                                                                                
10000 drop     all       11       1351                                    
                                                                                
--------------------------------------------------------------------------------
IPv4 Firewall "WAN_LOCAL":                                                      
                                                                                
 Active on (eth1,LOCAL) (eth7,LOCAL)                                            
                                                                                
rule  action   proto     packets  bytes                                         
----  ------   -----     -------  -----                                         
1     accept   all       545      67717                                         
  condition - state RELATED,ESTABLISHED                                         
                                                                                
4     accept   tcp       0        0                                             
  condition - tcp dpt:1723                                                      
                                                                                
5     accept   gre       0        0                                             
                                                                                
6     drop     all       68       2755                                          
  condition - state INVALID                                                     
                                                                                
10000 drop     all       716      123274                                        
                                                                                
--------------------------------------------------------------------------------
IPv4 Modify Firewall "SOURCE_ROUTE":
                                                                                
 Active on (eth6.1,IN) (eth6.2,IN) (eth6.10,IN) (eth6.50,IN)                    
                                                                                
rule  action   proto     packets  bytes                                         
----  ------   -----     -------  -----                                         
1     modify   all       0        0                                             
  condition - saddr 192.168.1.0/24                                              
                                                                                
2     modify   all       0        0                                             
  condition - saddr 172.16.0.0/22                                               
                                                                                
10    modify   all       0        0                                             
  condition - saddr 192.168.10.0/24                                             
                                                                                
50    modify   all       0        0                                             
  condition - saddr 192.168.50.0/24                                             
                                                                                
10000 accept   all       135      4320    
ubnt@Code-Node-Core:~$ show ip route table 1                                    
default via 81.***.***.*** dev eth1                                             
ubnt@Code-Node-Core:~$ show ip route table 2
default via 80.***.***.*** dev eth7  

 


Viewing all articles
Browse latest Browse all 20028

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>