I have an IPCop firewall acting as a firewall... the current configuration is:
Router --> Firewall --> Switch -->Hosts
The router is flakey and I'd like to remove it so that the firewall acts as the router. I want it to also monitor internet connectivity and simply 'dis-connect' and re-connect when it detects that it has been in a non-responsive state for more then a few minutes... how would I go about doing this?
This Question has been solved and asker verified All Experts Exchange premium technology solutions are available to subscription members.
Experts Exchange has been collecting answers to technology questions since 1996…3 million and counting! If you have a question, chances are we already have your answer.
If you can't find the exact answer you're looking for, ask our exclusive community of 50,000 experts. You’ll get a personalized answer from a trusted professional.
Thousands of free tech tips, tricks, how-to’s and tutorials are available in our peer reviewed articles section. See for yourself how smart our experts are, no login required.
Save solutions to your questions, answers you’ve discovered through searching plus helpful articles in your personal knowledgebase for easy future access.
Access the answers to your technology questions today.
30-day free trial. Register in 60 seconds.
Members of the expert community talk about why the experience at Experts Exchange is different than what you will find anywhere else.
Try it out and discover for yourself.
30-day free trial. Register in 60 seconds.
Join the community of experts here and help other tech pros by answering question in your area of expertise. You can earn FREE access to all Experts Exchange's premium features and resources.
The router currently takes care of pppoe authentication (it is an ADSL line)
I want to configure IPCop to do the authentication on its own... I also want it to be able to tell when it has been disconnected from the internet and reconnect (this is why I want to take the authentication portion off of the router -- so I can control it through a shell script or something)
> The router currently takes care of pppoe authentication (it is an ADSL line)
Is it just a router or is it an ADSL modem and router? You must have an ADSL modem in front of the IPCop box since the signals on the ADSL wire aren't the same as normal ethernet LAN signals.
If your current setup is:
ADSL modem --> Router --> IPCop Red
IPCop Green --> switch --> everything else
then sure, the router can go...it's completely unnecessary.
As for the disconnect/reconnect script...it'd be fairly easy to write a script that sends one ping to your ISP's nameserver and or something like google every 5 mins and take an action on an error (ideally, multiple addresses should be used so the action isn't taken if one address happens to go down but your connection is still fine). The problem is what action would it do? If IPCop loses internet connectivity, it's likely that the ADSL modem would have to be cycled, which would be fairtly complex to set up (one method that comes to mind is setting up an X.10 control to basically unplug the the outlet the modem is connected to, wait, then plug it back in....I've never done any X.10 stuff so I won't be able to help there other than googling up the info).
I've never had any of my (or my clients') IPCop boxes lose their connection where a disconnect/reconnect from the IPCop box would fix anything. The problems were always with the device ahead of the IPCop box, be it a cable or dsl modem or T1 hardware. Sometimes (like w/ the crappy RCA modems comcast rents to their customers here) after that device is reset, IPCop must also disconnect/reconnect....bu
I'm postive the router can go as it is redundant... (and possible the actual cause of the problem)
The internet 'outage' is always, 100% of the time resolved by power cycling the ROUTER (not the ADSL modem).... it is because of this I think I should be able to
a) detect internet failure - by pinging a remote server (or multiple machines as you suggested)
and THEN
b) Re-authenticate to the internet using PPoE.
I need a shell script that will do this.
If you take the router out of the picture, you won't need the shell script ;)
I had a crappy router on an SDSL line a while back...it seemed to drop out due to a small ARP cache according to the ISP's support staff (not sure I agree, but ditching that router did solve the problem).
IPCop shouldn't ever need to re-authenticate the PPPoE cause I really don't think it will drop the connection in the first place. I'd suggest scrapping the router that's in place and let IPCop have at it. If IPCop also drops the connection periodically then we can troubleshoot that issue, but I'd be *very* suprised if that happened.
#!/bin/sh
while 1=1
do
sleep 600s
# use your ISP's nameserver for xxx.xxx.xxx.xxx below
if ping -c 1 xxx.xxx.xxx.xxx
done
elif ping -c 1 www.google.com
done
fi
/etc/rc.d/rc.red down
sleep 5s
/etc/rc.d/rc.red up
done
I haven't trested it but it should be easy to debug. Basically it sleeps 600 seconds (5 minutes), pings xxx.xxx.xxx.xxx and if sucessful continues the alwaye true loop of while 1=1.
If it fails, if pings the next host with the same actions taken if successful. If it fails again then it runs the red down script, then red up.
also, since that script is an infinite loop...just save it (let's say as redcheck.sh), make it executable (chmod +x redcheck.sh), and run it in the background (./redcheck.sh &)
Every 10 mins it'll do the first ping. It the ping works (returns a 0 result), then it'll just cycle back and wait another 10 mins.
If ping returns a dest unreach or unknown host, then the return value will not be 0 and the next command will be executed.
Business Accounts
Answer for Membership
by: brabardPosted on 2005-08-11 at 23:03:35ID: 14658420
Wich connection this router provides to Internet ? What do you mean "a non-responcive state" ?