Print

Please login or register.
1 Hour 1 Day 1 Week 1 Month Forever
Login with username, password and session length

[lobezno]

Hi,

I have 2 internet uplinks, through two different ISP. Wan failover is working ok, also PPTP through wan1. But i'm not able to make it work through wan2.

This is my setup

WAN1 (DHCP) -> cable-moden (so, direct connection to the internet)
WAN2 (static 192.168.0.207/24) -> (192.168.0.201/24) DSL router -> Internet

Ther'es also an VLAN, but it'r not related.

DFL-800:/> routes
Flags Network            Iface          Gateway         Local IP        Metric
----- ------------------ -------------- --------------- --------------- ------
  M   192.168.2.0/24     wan2           192.168.2.201                   90
      172.17.100.0/24    dmz                                            100
      192.168.1.0/24     lan                                            100
      10.0.0.0/24        VLAN20                                         100
  M   0.0.0.0/0          wan1           XX.XX.XX.XX                     80

DFL-800:/> rules
Contents of ruleset; default action is DROP
#  Act.  Source                 Destination            Protocol/Ports
-- ----- ---------------------- ---------------------- --------------
1  Allow lan:192.168.1.0/24     core:192.168.1.1       "ping-inbound"
2  SAT   lan:192.168.1.0/24     core:192.168.1.1       "dns-all"
   SETDEST 8.8.8.8
3  NAT   lan:192.168.1.0/24     core:192.168.1.1       "dns-all"
4  Drop  lan,VLAN20:192.168.1.0/24, 10.0.0.0/24 wan1,wan2:0.0.0.0/0    "smb-all"
5  NAT   lan,VLAN20:192.168.1.0/24, 10.0.0.0/24 wan1,wan2:0.0.0.0/0    "ping-outbound"
6  NAT   lan,VLAN20:192.168.1.0/24, 10.0.0.0/24 wan1,wan2:0.0.0.0/0    "ftp-passthrough"
7  NAT   lan,VLAN20:192.168.1.0/24, 10.0.0.0/24 wan1,wan2:0.0.0.0/0    "all_tcpudp"
8  Allow pptp_server_wan1:192.168.1.160-.165 lan:192.168.1.0/24     "all_services"
9  Allow pptp_server_wan2:192.168.1.160-.165 lan:192.168.1.0/24     "all_services"
10 Allow VLAN20:10.0.0.0/24     core:10.0.0.1          "ping-inbound"
11 Allow *:0.0.0.0/0            wan2:192.168.2.207     "all_services"

PPTP works OK through wan1, but users can't connect from the internet to WAN2 PPTP Server (port 1723 redirecter from the DSL router). This is logged:

2016-05-27 12:54:10   Warning RULE 6000051   Default_Access_Rule   TCP   wan2 XX.XX.XX.XX 192.168.2.207   4132 1723   ruleset_drop_packet drop ipdatalen=32 tcphdrlen=32 syn=1
2016-05-27 12:54:10   Warning RULE 6000051   Default_Access_Rule   TCP   wan2 XX.XX.XX.XX 192.168.2.207   4132 1723   ruleset_drop_packet drop ipdatalen=32 tcphdrlen=32 syn=1

But they can connect from any IP address between WAN2 and the dsl router (192.168.2.0/24).

What i'm missing?

Regards,

Roberto

[FurryNutz]

I don't have much experience on DFLs.

Might try swapping WAN ports and see.
Check the user manual for any configuration help. Or phone contact D-Link support on this...