Avatar photoTelium Support Group
Post count: 262

I should start by saying that we don’t officially support this design because some of the steps involved are beyond the skill of an average administrator.

If you are very comfortable with networking, iptables, and routing then the answer is YES this can be done. (But our support team cannot assist you further with this topic).

Suppose you have

  • one NIC in each node
  • a single subnet (i.e. subnet) used by each NIC
  • Node A uses, and Node B uses

and you wish to have HAAst add to the active node (while leaving the management IP accessible). The steps to do so are:

  • Setup the OS to assign the static address and to their respective nodes
  • Setup haast.conf to enable the VoIP NIC feature, and tell HAAst to use as the shared IP
  • Setup the HAAst pre-start event handler to add the following postrouting rules in the NAT chain to source-NAT all outgoing voice traffic (5060 + RTP ports) as the shared IP:
    iptables -A POSTROUTING -t nat -p udp –dport 5060 -j SNAT –to-source
    iptables -A POSTROUTING -t nat -p udp –dport 10000:32768 -j SNAT –to-source
  • Setup the HAAst post-stop event handler to remove the above rules.

The end result will be that all voice related traffic will have their headers rewritten to show instead of (or Depending on the VoIP protocols you use, TCP vs UDP selection, and other socket services you offer you may have to expand on or customize these rules. But the above should be sufficient to show how to accomplish what you want.