FranC'ois Rousseau wrote: >> > But how I'm suppose to annonce the route for the right carp interface? >> > Right now my servers can always reach the router because of the CARP >> > interface but the router can't always reach the servers... >> > >> > If I unplug the cable of my CARP interface (bge2 for example), all >> > traffic from this router (directly from him or from my upstream >> > provider) can't reach the servers because the router still have only 1 >> > route going directly to his bge2 interface (the interface with carp) >> > and he have no clue of the MASTER interface. >> > >> > Maybe I'm worng and OSPF is not the solution. >> > >> > What I try to do is to have a redundant gateway for my servers (CARP) >> > and I want to have 2 upstreams provider with BGP (multihoming) >> > >> > I need a way for this 2 routers to talk to each other and share their >> > internal routes to know how to reach both of the "exit" point (route >> > to both upstream provider) and how to reach the MASTER interface of >> > every CARP group. >> > >> > Any idea? >> >
Your situation is different from mine, I am new to OSPF, and my information may not help you any, but here it is: I have a set up with two external routers and two internal routers. Both external routers uplink to the same ISP unlike in your situation. They share a carp'd external/inet IP and the status of this carp interface (and other path/interface failures determines which external router is used as the main uplink. My main problem setting this up is somewhat similar to yours in terms of getting the internal routers to know which external router to use for default route/external ISP access. The key for me was to have the ospf directives "redistribute connected" and "redistribute default" in the external routers' ospf.conf. Then I made sure that the internal routers did NOT have a statically assigned default route by removing /etc/mygate (since static routes take precedence over ospf-learned routes). This enabled me to have failover of my external/uplink routers. External router ospf.conf: primaryInlink="bge0" backupInlink="bge1" inet="carp0" dmz="carp1" # global configuration router-id 0.0.0.40 fib-update yes redistribute connected redistribute default auth-type crypt auth-md 1 scrubbedForPosting auth-md-keyid 1 # areas area 0 { interface $primaryInlink { } interface $backupInlink { metric 100 } interface $inet { passive } interface $dmz { passive } } The dual Inlinks are because my setup is fully connected via dedicated links, all inter-router traffic only goes through these dedicated pair links, not through a switch. Hope this helps, Chris