In MWG v6 we can set multiple port fowardings for same set of source subnet and destination port. This settings is implememnted in one of my customer's envirnonment. Now, they want to upgrade to MWG v7. In MWG v7, this settings is not allowed. My question is in MWG v6, if same set of source subnet and destination port is configured multiple times with different set of destination IPs then how does MWG v6 process it. Can we achieve same functionality in MWG v7?
In the above image same set of source and port can be used multiple times with different set of destination host. What does this sort of configuration do? Is there any way to achieve same outcome in MWG v7?
Message was edited by: satbir on 3/19/13 1:55:40 AM CDT
did you ever try if that worked as expected? As far as I know port forwarding is a 1:1 relationship. You cannot open a port multiple times and have it forwarded to different destination addresses. I wonder if you were able to enter a port multiple times in MWG 6 erroneously.
Hello Andre, good point! it should always have 1:1 relationship. MWG v6 accepts this configuration so I am not sure if it's correct or wrong. I need confirm whether the configuration set on mwg v6 is wrong or the other two mappings works as fallback IPs for the set of source and port. My customer's upgrade activity is on halt because of this ambiguity. It would help if i can get some sort of confirmation on it.
I configured Port 80 two times with different destinations on my MWG 6.x. Here is what the log says:
Mar 19 15:35:27 MWG6-1 xinetd: bind failed (Address already in use (errno = 98)). service = forwarder_80
Mar 19 15:35:27 MWG6-1 xinetd: Service forwarder_80 failed to start and is deactivated.
Only the first entry is used, all additional using the same port are disabled.
To be sure you could SSH into one of the existing machines at your customer and run
Then watch the log files in /var/log (check messages or syslog) and you should notice similar messages. I am pretty sure (lets say 95%) that this has been configured someday in the past with the assumption of having a fallback, but was never tested and did never work.
Another good example why upgrading from 6 to 7 is a good chance to get rid of old, useless or broken stuff ;-)