Dual Wan configuration suggestions?
This thread has been locked for further replies. You can start a new thread to share your ideas or ask questions.
Hi all, I need some suggestions on how to setup my dual wan connection.
I have 2 ISP's that the lines come out at the oposite side of the house and that makes a problem as only 1 lan cable goes half way into the SG108PE where both routers can reach it.
Cabling is a bit of a problem so I would like to skip if possible.
Now I have setup the first ISP router into Bridge mode and set it under WAN1 and works great.
However ISP router 2 cannot reach the dual wan ER605 router but it can reach the SG108PE.
The solution I see here is to make a VLAN on the SG108PE and route it to the ER605 and setup an Wan2 Vlan interface?.
The question is will it work and is it "smart" to let a public IP connection into a switch despite the VLAN isolation?
Also side question does anybod have any wxperience with this weird ISP router calles Innbox v46 that has one billion options and I still cant figure out how to set it in Brige mode as its an ADSL modem and my phone and tv goes trough it as well!
Thanks!
- Copy Link
- Subscribe
- Bookmark
- Report Inappropriate Content
With the SG108, you should use 802.1q VLANs for the ISP connection. It should be untagged on the port attached to the modem, but tagged on ingress by the SG108 and received by the WAN2 port of the ER605 which has the same VLAN ID assigned as the ISP port on the 108. Obviously don't share this VLAN ID with any other service.
Enable tagging for the WAN port on the ER605 should be enough to isolate your WAN traffic in the LAN environment.
My question is how the ER605 and SG108PE are connected (are they adjacent to each other, or is there a run of cable between the two). If you cannot easily run a second cable from the SG108 to the ER605, the above solution is likely of no benefit.
How fast is your ISP's connection? If it's less than 100M/100M, you could split your single cable into two cables using 2 pairs each, with a max throughput of 100M each. You might just want to run more cable....
- Copy Link
- Report Inappropriate Content
The SG108 is connected with lan cable to the ER605 on lan port 8.
As I see it it would be best ro run another cable to the WAN2 port as I do not see a way to put VLAN and WAN2 on port 2 as WAN..
Seems even very complicated..
It is not easy to run anoher cable but I see no other solution at this point.
- Copy Link
- Report Inappropriate Content
- Copy Link
- Report Inappropriate Content
I do have an extra 108E 8 port that I do not use!
How do you recon this configuration should look like?
Could you elaborate a bit more im kind of confused when it comes to VLANS.
Thank you!
- Copy Link
- Report Inappropriate Content
I'll presume based on the above respones you aren't currently using VLANs at all in your current design? If so, then imagine New108.port8 is connected to WAN2 of your ER605 router. Also, imagine that Existing108.port8 connects to your second ISP modem. Lastly imagine that New108.port1 connects to ER605.LAN. With this setup, you would use 802.1q VLANs and configure both port 8's as belonging to a unique VLAN ID, let's say 10. Both ports are 'untagged' for egress traffic, but mark the inbound packets with VLAN_10 (this is often called the PVID). Now what happens is that any packet entering either port8 can only exit the other port8, and because you have set the PVIDs of both port8's to '10' the traffic is invisible to untagged traffic on the default VLAN (usually '1'). Now you could connect say ER605.LAN port to New108.port1, and that traffic would become available on ports 1-7 of the Existing108 switch, and any traffic from the remote ports 1 through 7 would wind up on ER605.LAN for forwarding...which could either be out the local WAN, or, via WAN2->New108.port8->Existing108.port8->DSL modem.
- Copy Link
- Report Inappropriate Content
- Copy Link
- Report Inappropriate Content
To apply Dual WAN configuration:
Connect your main ISP line to WAN1 interface of the Cloud Edge box and the backup ISP line to WAN2 (LAN1) interface.
On the Cloud Edge On-Premise console, go to Network > Interfaces.
Edit your WAN interfaces (WAN and WAN2/LAN1) and select DHCP/PPPoE mode.
Supported modes for DUAL WAN are DHCP/DHCP and DHCP/PPPoE.
Enable monitor settings to check if both WAN lines still work. You can monitor some public DNS servers or any public IP addresses that are ICMP reachable.
It is necessary to configure two (2) monitor hosts. If you only want to configure one host, input the same IP address on both monitoring host 1 and host 2 fields. Cloud Edge appliance will redirect network traffic to the backup LAN1/WAN2 route when both monitoring hosts are ICMP unreachable.
On the same page go to Network > Routing > Policy Routing.
Configure Policy Route to direct traffic more precisely. This is necessary to have your DUAL WAN environment work in active/passive mode.
Source Address: Any
Destination Address: Any
Service Type: Any
Egress Interface: WAN or LAN1 (select interface that is connected to the active line)
If you have configured other policy route, move the "any-any" policy route to the bottom. This is to ensure other policy routes would still work.
On the Cloud Edge Cloud Console, go to Gateways.
Select gateway and click NAT.
Configure Source Network Address Translation (SNAT) on both WAN interfaces to allow internal address access to the Internet.
NAT Type: Source
Egress interface: WAN and LAN1 for the other interface
Source IP translation: Egress interface IP address
Click Save and then Apply.
Configure your LAN network interfaces via Cloud Edge Cloud Console. The procedure is the same on Cloud Edge single WAN mode.
To test if the active/passive mode of Dual WAN Cloud Edge setup is working, use "tracert" command on your endpoint:
When both WAN1 and WAN2 are working, traffic will pass through WAN1 interface.
- Copy Link
- Report Inappropriate Content
I have the legitimate comprehension of VLANS yet with regards to making and setting them up im completely astounded! So what I have done is run the wire so presently I have the ISP 2 modem conected with the link on the WAN1/LAN port anyway I failed to remember that the ISP 2 additionally has IPTV on it and that would now reqiure ANOTHER WIRE! So I checked the ISP modem and I can see the IPTV has a VLAN ID of 3968 yet there are 1,000,000 choices in this ISP's switch and to the extent that I can see it has some inside spanning br0,br1,br2,br3,br4,br5.
I reached the ISP and asked how might I forward and inquired as to whether that VLAN is the IPTV and they said OK yet they wouldn't offer help for sending it to my ER605... Soooo what I really want to do currently is have WAN and IPTV on a similar link and inside omada I truly do see the choice for IPTV! Presently the inquiry is how would I forward that 3986 VLAN that will come into the ER605 WAN1/LAN port and out the LAN 4 port.
- Copy Link
- Report Inappropriate Content
- Copy Link
- Report Inappropriate Content
- Copy Link
- Report Inappropriate Content
Information
Helpful: 0
Views: 1133
Replies: 10
Voters 0
No one has voted for it yet.