How to create a VIP on second subnet with two ISPs

Here is the basic setup, I have two ISPs one copper & one fibre

Running on 101F ver. 7.0.x

With ISP1, i got a public subnet 1.2.3.0/28

With ISP2, I got a public subnet 4.3.2.0/28

Configured IPs on two wan interfaces with 1.2.3.2, 4.3.2.2

2 Static routes were configured with

0.0.0.0/0 default gw 1.2.3.1 (first ISP gateway)

0.0.0.0/0 default gw 4.3.2.1 (second ISP gateway)

Everything works as intended. I also have VIPs mapped using 1.2.3.0/28 subnet and with appropriate firewall policy

they show the correct IP (source IP) when I run something like:

dig +short myip.opendns.com @resolver1.opendns.com

However, when I repeat the same configuration for VIP using 4.3.2.0/28 subnet, the source ip always shows 1.2.3.2( interface IP of first ISP)

in other words if VIP was 4.3.2.3 mapped to 10.10.10.10 on inside, it still shows as 1.2.3.2

How can I get the source IP show the VIP that I created.

Staff

Hi @Stealthy ,

I have to clarify something first:

1) I am not familiar with the dig command. Is it similar to the nslookup command on Windows?

2) When you say "source IP", do you mean "resolved DNS IP"?

3) Could you please show the configuration of those 2 VIPs?

New Member

Ah,

so..it is interesting on how one finds errors as they are documenting/copying configurations for others. My issue has been resolved.

To fullfill your #3, I was copy pasting the CLI in notepad, and I noticed my mistake.

Sign up