Firewall Backup Interface I-Note
![Zyxel_Richard](https://us.v-cdn.net/6029482/uploads/defaultavatar/nN4PAQRO7TCNP.jpg)
![](https://us.v-cdn.net/6029482/uploads/userpics/FN0BI9T10CTX/n6O940IZ5DEW6.png)
![Zyxel Certified Network Engineer Vertical - Education](https://us.v-cdn.net/6029482/uploads/badges/HB8OTM68ADC8.png)
![Zyxel Certified Network Engineer Vertical - MSP](https://us.v-cdn.net/6029482/uploads/badges/T0FRSJ5OTO9I.png)
![Zyxel Certified Network Engineer Vertical - HORECA](https://us.v-cdn.net/6029482/uploads/badges/N672CI980VCQ.png)
![Zyxel Certified Network Engineer Vertical - Elite](https://us.v-cdn.net/6029482/uploads/badges/57CJ6PHFV9IQ.png)
Firewall Backup Interface I-Note
Overview of the Update
In the latest update for USG FLEX and ATP firewalls, we have introduced a minor but important enhancement to the WAN load balancing feature. This update includes additional notes in the I-Note section of the WAN load balancing settings, providing users with crucial information about backup interface behavior.
WAN Load Balancing in Routing
WAN load balancing can be found under the routing settings of your firewall. This feature allows you to distribute traffic across multiple WAN interfaces to optimize bandwidth and ensure redundancy.
Typical WAN Load Balancing Setup
In a common setup, you might have:
- ISP 1: Primary active connection
- ISP 2: Secondary backup connection, often used with metered services
Use Case: Metered ISP Backup
A metered ISP charges based on the amount of data transferred. Typically, the backup interface (ISP 2) is used only when the primary interface (ISP 1) fails. This setup is designed to minimize costs by limiting traffic on the metered connection.
Important Note: Periodic Keep-Alive Packets
One critical issue we identified is that even when ISP 2 is set as a backup and not actively handling client traffic, the firewall still sends periodic keep-alive packets over this interface. These keep-alive packets ensure the backup connection is ready to take over if the primary connection fails.
Implications for Metered Connections
- Periodic Keep-Alive Traffic: Small amounts of data sent periodically to verify the backup connection’s availability.
- Cost Impact: While the data volume is minimal, it is not zero and can incur small charges from the metered ISP.
Enhancements in the I-Note
To address this, we have added specific notes in the I-Note section under WAN load balancing settings. These notes inform users about the periodic keep-alive traffic on backup interfaces, particularly relevant for those using metered ISPs.
Steps to Access the I-Note
- Navigate to Routing Settings: Go to the routing section on your firewall’s configuration interface.
- Select WAN Load Balancing: Click on WAN load balancing to view and adjust your settings.
- Review the I-Note: Locate the I-Note section for detailed information about backup interface behavior.
Recommendations for Users
- Monitor Usage: Be aware of the periodic keep-alive packets and monitor your metered ISP usage to avoid unexpected charges.
- Plan Accordingly: Consider these keep-alive packets when budgeting for metered ISP costs, even if the primary intention is to minimize traffic on the backup interface.
Conclusion
The updated I-Note in the WAN load balancing settings of USG FLEX and ATP firewalls provides essential information for users relying on metered ISPs for backup connections. By understanding the behavior of keep-alive packets, users can better manage their network costs and ensure their backup interfaces are configured to meet their needs effectively.
Categories
- All Categories
- 414 Beta Program
- 2.2K Nebula
- 130 Nebula Ideas
- 88 Nebula Status and Incidents
- 5.4K Security
- 166 USG FLEX H Series
- 255 Security Ideas
- 1.4K Switch
- 71 Switch Ideas
- 999 Wireless
- 36 Wireless Ideas
- 6.2K Consumer Product
- 233 Service & License
- 370 News and Release
- 77 Security Advisories
- 24 Education Center
- 5 [Campaign] Zyxel Network Detective
- 2.9K FAQ
- 34 Documents
- 34 Nebula Monthly Express
- 80 About Community
- 69 Security Highlight