null  null
Setting up two Internet connections with failover
D-Link Australia & New Zealand Technical Support
Page 1 of 7
This configuration example is based on the following setup:
Internet connection failover
from WAN1 to WAN2
Internet
WAN2
WAN1
DFL-series
UTM Firewall
LAN
192.168.8.0/24
Step 1. Log into the firewall. The default access to LAN is via https://192.168.10.1. Default username is
“admin” and password is “admin”.
Step 2. Set your WAN 1 and WAN2 settings as per Internet provider requirements.
In our example WAN 1 is set as DHCP client and WAN 2 with static IP address.
WAN1: DHCP
WAN2: Static IP
D-Link Australia & New Zealand Technical Support
Page 2 of 7
Step 3. Go to Network > Ethernet > and set WAN1 and WAN2 with required IP settings.
Click on Advanced tab. Disable the “Add route…” and “Add default route…” options for WAN1 and WAN2 (otherwise
you won’t be able to modify the routing settings).
D-Link Australia & New Zealand Technical Support
Page 3 of 7
Step 4. Go to Network > Interface Groups. Combine WAN1 and WAN2 into a group.
(This is just to make it easy to apply rules to both interfaces in one go).
Step 5. Go to Policies > Main IP Rules. Add a new (or modify the existing “Allow_standard”) rule which does NAT for
all traffic going from LAN to WAN1 and WAN2.
Set LAN as Source and the “WAN1-and-WAN2” interface group as Destination..
D-Link Australia & New Zealand Technical Support
Page 4 of 7
Step 6. Now we need to manually create a default route that routes via WAN1.
Go to Network > Routing > Main routing table. Create a Route for WAN1:
- Network: all-nets (that means Destination IP – Any).
- Gateway: wan1_gw.
- Since we want WAN1 to be our primary route, set lower Metric e.g. 80 (default is 100).
Click on the Monitor tab and enable the “Monitor” option.
“Monitor Interface Link Status” – physical connection status;
“Monitor Gateway using ARP” – next hop connectivity status.
D-Link Australia & New Zealand Technical Support
Page 5 of 7
Step 7. Create similar Route for WAN2 (or modify existing).
Make sure the destination Network is set to “all-nets”.
Make sure to set Metric higher than WAN1 (e.g. 90).
Click on the Monitor tab and enable the “Monitor” option.
D-Link Australia & New Zealand Technical Support
Page 6 of 7
Step 8. After the configuration is done, click “Configuration” in main bar and select “Save and Activate”.
Then click OK to confirm. Wait for 15 sec. You will be automatically redirected to the firewall’s LAN IP
address.
NOTE: If you do not re-login into the firewall within 30 sec, the configuration is reverted to its previous
state. The validation timeout can be adjusted under System > Remote Management > Advanced Settings.
D-Link Australia & New Zealand Technical Support
Page 7 of 7
Was this manual useful for you? yes no
Thank you for your participation!

* Your assessment is very important for improving the work of artificial intelligence, which forms the content of this project

Download PDF

advertisement