Router Vyatta/Vyos not routing between interfaces

i have 3 interfaces (wan+lan) and a few vif (vlans) all with their own addresses.  up until recently the routing was working fine between subnets and networks. there's a zone policy which has all the vlans and lan's in the same security zone.

the point at which things get complicated is i recently added another wan to the equation using loadbalancing. and now for some reason all the subnets arent routing one to another. from themselves to the internet they work but from one to another they don't.

subnets in use:

LAN - 192.168.20.0/24
Wifi - 192.168.21.0/24
DMZ - 10.40.20.0/28

the issue is all the subnets route to the internet properly, and when pinging the router address of another subnet it responds, but when pinging an ip on another subnet it routes to the internet directly. (does not follow the route table of the router)

i have not changed anything other than the load balancing but the router isn't routing internally to other subnets.
masteritlionAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

JustInCaseCommented:
This is problem consideration.
Since usually you can't set two default routes on router, I guess that you have used some form of policy based routing.
Policy based routing ignore routing table and sends packet directly to interface you specified directly from vlan interface, so in that case it will result in behavior like one you are describing.
I am not familiar with Vyatta/Vyos, so I don't really know what what your options are on specific device, but I guess that you should set first rules for packets with destination address of your local VLANs matching rule, and then you should set matching rule to any destination (everything outside local network).
masteritlionAuthor Commented:
there are default routes between the subnets (one subnet per vlan)

the cli is similar to juniper or cisco.

the router is multihomed. since the fw does not block inter vlan routing i didn't even have to set policy routing it worked as it should from the default routing table. i believe that the load balancing (wan1 wan2) uses policy based routing however i'm not sure.
JustInCaseCommented:
If you have routes in devices route table (check route table) to your VLANs, not blocking inter VLAN traffic and you don't have connection between VLANs it is most likely PBR problem. You can use traceroute to check path packets are using while trying to reach other VLAN, that can tell you a lot.

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
masteritlionAuthor Commented:
You were correct!  after going over the full vyatta manual on routing apparently load-balancing takes precedence over the route table.  as such i had to have load-balancing exclude the subnets from the policy.

This can be resolved in vyatta/vyos either by using :

set load-balancing wan rule XX exclude
set load-balancing wan rule XX  source address
set load-balancing wan rule XX  destination address
set load-balancing wan rule XX  inbound-interface

or by creating a full fledged policy based routing policy and assigning it to the specified interfaces.
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Routers

From novice to tech pro — start learning today.