On Wednesday, 2 February 2011 21:24:58 d.tom.schmitt at l-3com.com wrote:
I am using the 'route:' statement for dependencies currently.
In my environment, I have dual everything to the wiring closet, or dual homed servers.
Is this for NIC + switch redundancy, or do you need separate IP addresses? On different VLANs?
Is there a way to have a device watch for BOTH paths back?
This may not help you, but what we do is: 1)Wire two NICs to different switches (say eth0 and eth1) 2)Bond the two NICs (as say bond0) 3)If we need more than one VLAN, trunk both ports and run VLANs on the host (e.g. bond0.100 and bond0.101).
Then we monitor the "closest" interface to the monitoring server (which is multi-homed), and on the route tag, we put the HSRP address of the gateway for the subnet (bet it switch or firewall).
Note: we only set one 'default' gateway, it's easier to know exactly what path the packets take, what their source addresses will be, when you have another team unfamiliar with the intricacies of your environment maintain the firewalls.
Regards, Buchan