On Wed, Sep 03, 2003 at 06:08:46PM +0900, Curt Sampson wrote:
> I've got a network that looks like this:
> 
>                 |--- fw1 ---|
>     remotegw ---|           |-------------------------------
>                 |--- fw2 ---|     |       |       |
>                 |               host3   host4   host5  ...
>                 |-- host1
>                 |
>                 |-- host2
> 
> remotegw is a router outside of my control, and provides routing to the
> internet. Everything else is one of my hosts. Let's call the left-hand
> network "outside" and the right-hand network "inside."
> 
> Unfortunately, routed does not distribute the static route to remotegw
> that was put in (at boot time) in the kernel routing tables of fw1
> and fw2, ...

routed on fw1/2 should declare itself to be the default gateway on the
internal network (gateways have [1] to be in the systems own subnet).

The real problem you have is that IP routing isn't designed for 'fast
failover'.  Routed doesn't help since the daemons don't chatter to
each other continuously (would waste a lot of bandwidth).

	David

[1] At least traditionally, since the gateway's IP address is converted to
an ethernet address using ARP.

-- 
David Laight: david@l8s.co.uk