[AusNOG] Edgerouter Dual WAN + IPSEC

[Jacob Gardiner]

Hey all,

I'm troubleshooting an issue where we have an Edgerouter deployed with dual
wan (failover only, not load balancing) with an IPSEC VPN to Google cloud
platform.

In particular, the DNS queries originating from the GCP side reach the
server internally ok, but the responses seem to be load-balancing back out
the pppoe0/1 interfaces, and only received sometimes on the remote side
(when the response goes out pppoe0)

If anybody's got some experience with this kind of deployment before and
has a bit of spare brain capacity, feel free to email me direct to avoid
spamming the list.

I've tried various LB configs, routing table configs, DNAT configs, also
have turned off the 'smart' auto-nat/firewall features.

Cheers

-- 
Jacob Gardiner
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.ausnog.net/pipermail/ausnog/attachments/20190730/43cb36f9/attachment.html>