Question about failover\dual WAN
I have a USG110 with dual inbound WAN. The setup is I have two strands of fiber coming in, one from a Northbound loop and one from a Southbound loop. Obviously, I'm setting up for redundancy so that if one feed dies, I'm good on the second loop.
So, I set up a WAN trunk, added my two WAN ports to it and set it to default. I also did all of this remotely and I stayed connected. I never dropped connectivity for the rest of the night.
Then, oddly enough, the primary loop went down. After that, I was never able to get connected remotely again. I had to go onsite, power cycle the router, and everything came back up. I'm going with the failover failed and didn't fail back, but I wanted someone to chime in and tell me what they think.
Also, I have some NAT rules in the router. For example, port 443 comes in on WAN1 and redirects to my IIS secure server.
After I added the WAN Trunk, I "expected" to alter my NAT rules and redirect all inbound from the WAN Trunk to my respective servers, and I do not see that. What's the point in having a failover internet connection if I can't alter my NAT rules and DNS to make that happen.
Thanks for your help.
So, I set up a WAN trunk, added my two WAN ports to it and set it to default. I also did all of this remotely and I stayed connected. I never dropped connectivity for the rest of the night.
Then, oddly enough, the primary loop went down. After that, I was never able to get connected remotely again. I had to go onsite, power cycle the router, and everything came back up. I'm going with the failover failed and didn't fail back, but I wanted someone to chime in and tell me what they think.
Also, I have some NAT rules in the router. For example, port 443 comes in on WAN1 and redirects to my IIS secure server.
After I added the WAN Trunk, I "expected" to alter my NAT rules and redirect all inbound from the WAN Trunk to my respective servers, and I do not see that. What's the point in having a failover internet connection if I can't alter my NAT rules and DNS to make that happen.
Thanks for your help.
0
Accepted Solution
-
You should create NAT rules both for WAN1 and WAN2.So, 443 will be redirected in both cases.1
All Replies
-
You should create NAT rules both for WAN1 and WAN2.So, 443 will be redirected in both cases.1
-
This angers me. Thanks though. I figured as much.0
Categories
- All Categories
- 415 Beta Program
- 2.4K Nebula
- 151 Nebula Ideas
- 98 Nebula Status and Incidents
- 5.7K Security
- 277 USG FLEX H Series
- 277 Security Ideas
- 1.4K Switch
- 74 Switch Ideas
- 1.1K Wireless
- 42 Wireless Ideas
- 6.4K Consumer Product
- 250 Service & License
- 395 News and Release
- 85 Security Advisories
- 29 Education Center
- 10 [Campaign] Zyxel Network Detective
- 3.6K FAQ
- 34 Documents
- 34 Nebula Monthly Express
- 85 About Community
- 75 Security Highlight