Nick Howitt wrote:

MultiWAN should help, depending on how it is configured. Configure the other interface as backup and you should be OK. I have seen a couple of issues with MultiWAN so I can't guarantee it and I have no easy way of testing as I only have one WAN.

Does not work with Multi WAN. It would be nice to fix it. Thanks for your help while I turn off the backup channel.

MultiWAN should help, depending on how it is configured. Configure the other interface as backup and you should be OK. I have seen a couple of issues with MultiWAN so I can't guarantee it and I have no easy way of testing as I only have one WAN.

Nick Howitt wrote:

If you are not using it, please either try deleting enp3s0 or setting it to LAN with no IP or a static IP on a different subnet. If it does not exist in the webconfig, please remove the entry from /etc/clearos/network.conf. If you do need it and you want it as an external interface, make sure you have the MultiWAN app installed.

Indeed, when you remove enp3s0 or change the LAN, IP 192.168.8.1 becomes available . But I plan to use enp3s0 as a backup channel. Multi-WAN is installed but it doesn't help. How can you get around this limitation?

If you are not using it, please either try deleting enp3s0 or setting it to LAN with no IP or a static IP on a different subnet. If it does not exist in the webconfig, please remove the entry from /etc/clearos/network.conf. If you do need it and you want it as an external interface, make sure you have the MultiWAN app installed.

Nick Howitt wrote:

That should work directly, I think. The firewall should do nothing to stop it. Is your modem interface set to External in the IP settings? What do you get from:

grep IF /etc/clearos/network.conf

ifconfig | grep '^\S' -A 1

ip r

# grep IF /etc/clearos/network.conf

EXTIF="enp0s21f0u3 enp3s0"

LANIF="enp4s0"

DMZIF=""

HOTIF=""



# ifconfig | grep '^\S' -A 1

enp0s21f0u3: flags=4163<UP,BROADCAST,RUNNING,MULTICAST>  mtu 1500

        inet 192.168.8.100  netmask 255.255.255.0  broadcast 192.168.8.255

--

enp3s0: flags=4099<UP,BROADCAST,MULTICAST>  mtu 1500

        ether 18:c0:4d:1a:57:4e  txqueuelen 1000  (Ethernet)

--

enp4s0: flags=4163<UP,BROADCAST,RUNNING,MULTICAST>  mtu 1500

        inet 192.168.37.100  netmask 255.255.255.0  broadcast 192.168.37.255

--

lo: flags=73<UP,LOOPBACK,RUNNING>  mtu 65536

        inet 127.0.0.1  netmask 255.0.0.0



# ip r

default via 192.168.8.1 dev enp0s21f0u3 

192.168.8.0/24 dev enp0s21f0u3 proto kernel scope link src 192.168.8.100 

192.168.37.0/24 dev enp4s0 proto kernel scope link src 192.168.37.100

That should work directly, I think. The firewall should do nothing to stop it. Is your modem interface set to External in the IP settings? What do you get from:

grep IF /etc/clearos/network.conf

ifconfig | grep '^\S' -A 1

ip r

Nick Howitt wrote:

Are you saying your LAN in on 192.168.8.0/24? You can't have the LAN and WAN on the same subnet (or any two NICs). It is not really a firewall issue, more a routing issue.

Wan 192.168.8.0/24 and LAN 192.168.37.0/24. It is quite possible that there is a problem with routing, but I don’t know how to configure it correctly.

Are you saying your LAN in on 192.168.8.0/24? You can't have the LAN and WAN on the same subnet (or any two NICs). It is not really a firewall issue, more a routing issue.

Using Huawei E8372, it is visible in the system as a network card.

You probably didn't understand. I don't need a virtual interface. I have access to 192.168.8.1 in Network Mode - No Firewall mode, and when I turn on Network Mode - Gateway Mode, access to 192.168.8.1 will be lost. Probably blocking the firewall, tried using iptables, it doesn't work.

Interesting one. The answer is probably similar to my PPPoE modem but I don't know. You could try creating a Virtual IP on your WAN interface, something like 192.168.8.2/24. I can't do it throught the webconfig with PPPoE as the underlying external does not show up. Intead I use a file, /usr/sbin/ifup-local, with:

# created by njh for testing

if [ "$1" == 'ppp0' ]; then

    true

    logger -t ifup 'Bringing enp2s0:0 up as ppp0 is coming up'

    ifconfig enp2s0:0 192.168.2.2 netmask 255.255.255.0

fi

If you can't do it through the webconfig, you could try the ifconfig command on its own and see if it helps. If it works, try my script.

[edit]
What is the modem?
[/edit]