FireBrick How to: Upload Route Overrides

Scenario

You are bonding multiple lines up and down, but you want some particular device to only send traffic up a single line rather than bonding the upload.

You may want this if you have long lines and slow throughput and you wish to have your VoIP only going UP one of the broadband lines.

Config

This is assuming you already have the FireBrick set up and working well, bonding all the traffic. Let's say you have three ADSL lines.

What we want to do is to use just line 3 for upload of these specific devices.

IP Group

It's easier to manage the config if we create an IP Group for the device(s) that we want to use line 3 for their upload.

<ip-group name="phones" ip="192.0.2.99" comment="IPs here are phones, this is used in route overrides"/>

Profile

We want to only override the route if the DSL line is up, so lets create a profile for this: (our line 3 is called ADSL3)

<profile name="ADSL3" ppp="ADSL3"/>

PPP Changes

We need to tell the FireBrick a coupel of things regarding the config for Line three's PPP:

Use the line as a lower priority - that way all other traffic won't be using it
Add an IP to the 'Routes' as this is what we'll use as the gateway in the override

eg:

<ppp name="WAN3" port="WAN" username="example@a.3" password="secret" speed="300000" lcp-rate="1" lcp-timeout="10" routes="0.0.0.5" localpref="50" graph="Line 3" comment="Used for VOIP upload hence localpref and route"/>

Route override

<route-override name="VoIP" profile="ADSL3" comment="Send VoIP up line 3">
 <rule source-ip="phones" set-gateway="0.0.0.5"/>
</route-override>