Hello!
I'm getting this issues with wan load balance on all 1.4 versions:
1)VyOS reply to ping on incorrect interfaces
2)On one of the WANs VyOS also replacing source IP of DNAT'ed packets
Also
My configuration:
Interfaces:
ethernet eth0 {
vif 2220 {
address 172.22.87.2/24
}
vif 2498 {
address 172.22.1.2/24
}
}
ethernet eth1 {
vif 2494 {
address 172.22.86.2/24
}
}
show high-availability:
group wan1 {
address wan1/29 {
}
hello-source-address 172.22.87.2
interface eth0.2220
peer-address 172.22.87.1
priority 50
vrid 87
}
group wan2 {
address wan2/24 {
}
hello-source-address 172.22.1.2
interface eth0.2498
peer-address 172.22.1.1
priority 50
vrid 98
}
group wan3 {
address wan3/25 {
}
hello-source-address 172.22.86.2
interface eth1.2494
peer-address 172.22.86.1
priority 50
vrid 86
}
route 0.0.0.0/0 {
next-hop wan2gwip {
interface eth0.2498
}
next-hop wan3gwip {
interface eth1.2494
}
next-hop wan1gwip {
interface eth0.2220
}
}
show load-balancing wan:
enable-local-traffic
flush-connections
interface-health eth0.2220 {
failure-count 1
nexthop wan1gwip
success-count 1
}
interface-health eth0.2498 {
failure-count 1
nexthop wan2gwip
success-count 1
}
interface-health eth1.2494 {
failure-count 1
nexthop wan3gwip
success-count 1
}
sticky-connections {
inbound
}
show nat:
destination {
rule 10 {
destination {
port 80,443
}
inbound-interface eth0.2498
protocol tcp
translation {
address 10.10.43.22
}
}
rule 20 {
destination {
port 80,443
}
inbound-interface eth1.2494
protocol tcp
translation {
address 10.10.43.22
}
}
}