SA520 and dual wan

Hello!
Have bought a SA520 and tries to setup with 2 wan. 1 with static and 1 with dhcp. After I set the optional port - wan mode to load balancing, and look in the dashboard it shows that wan interface is up and with right static adress, but the optional(wan) shows down and now ipadress. If I put the cable from optional port into a computer, I got ipadress and internet connection, so the line is ok.
What are I doing wrong??
Regards
Kåre!

I will update on things I have tried to get this working.
I have checked that Content filtering and ProtectLink are both disabled due to protocol binding not working with them.
I have setup IP Alias on both Wan ports and changed outgoing firewall setting to Block all then added Firewall rules to allow access through a single Wan.
I setup the IP of the IP alias of WAN1 as Gateway for the machine.
Nothing that I have tried has worked and I am thinking the inbound binding is only working because of the port forwarding.

Similar Messages

ASA 5505 Dual WAN - Ping inactive wan from outside?

I currently have some small branch offices using ASA 5505 with Security Plus license and dual wan connections. They are configured wil an sla monitor so if the primary WAN goes down the secondary connection becomes active. This works as expected, however...
I can't ping the non-active interface from an outside source. I beleive this is by design or due to some limitation on the 5505. The problem is that I don't know if the backup WAN connection is functioning normally without forcing the ASA to make it active. We use a flaky wireless connection for the backups. The problem recently bit me because both WAN connections were offline.
I'm looking for an easy way to monitor the inactive wan interface, preferably by pinging from an outside location. Is this possible?

Hello,
This wont work because the ASA receives the ping on the backup link but has the default route pointing to the outside.
You would have to add a more spefic route for your IP.
Example:
If you want to ping coming from IP 1.1.1.1
route outside 0 0 x.x.1.1 1 track 1
route backup 0 0 x.x.2.2 250
route backup 1.1.1.1 255.255.255.255 x.x.2.2
Regards,
Felipe.
Remember to rate useful posts.

HI, I HAVE A MacBook Pro 2.3GHz dual-core Intel i5 AND I WAN'T TO UPGRADE THE HARD DRIVE UP TO 750GB AND ALSO THE RAM MEMORY TO 8GB. WHAT SPECIFIC MODEL OF HARD DRIVE AND RAM MEMORY SHOULD I BUY??? THANKS

HI, I HAVE A MacBook Pro 2.3GHz dual-core Intel i5 AND I WAN'T TO UPGRADE THE HARD DRIVE UP TO 750GB AND ALSO THE RAM MEMORY TO 8GB. WHAT SPECIFIC MODEL OF HARD DRIVE AND RAM MEMORY SHOULD I BUY??? THANKS

No need to type in all caps - we HEAR you!
I would take a look at the internal drives offered by both Crucial (click the link "Internal Hard Drives Now Available") and OWC. I would stay away from Western Digital drives as they seem to have problems on a number of Mac models.
You can also shop for RAM at Crucial and OWC - just select the System Scanner tab at the Crucial website to find out which memory is right for your machine.
Good luck,
Clinton

Dual Wan and port routing

Hi,
I am setting up a configuration with SA520W and 2 Wan, in load balancing. But I face a problem that I could not understand.
Traffic is HTTP, SIP and 2 servers.
Servers are for a VPN tunnel and a mail server with ActiveSync
Both services absolutely need port 443 on the external IP, and that's one of the dual wan reason.
The 2 wan are running, load balancing mode is enable and NAt routing in firewall tab as follow :
443 Enabled     WAN     LAN     ALU_OpenVPN     ALLOW always     Any         192.168.0.150     WAN1     Always
443   Enabled     WAN     LAN     ActiveSync     ALLOW always     Any         192.168.0.254     WAN2     Always
If load balanced
Port 443 is NOT routed from wan1 to 192.168.0.150
Port 443 is routed from wan2 to 192.168.0.254
If only WAN 1
Port 443 is routed from wan1 to 192.168.0.150
If only WAN 2
Port 443 is routed from wan2 to 192.168.0.254
In fact I did other testing and no port routing with WAN1 when load balancing is enable, even on port that is not used at all on Wan2.
With a FTP filezilla server, it's OK if on wan2, and it stop before logging if on a wan1 (on laod balancing, ok on both case if only one wan)
Firmware : latest 2.1.18
Any Clue ??

Hello,
I confirm, there is a strange behaviour.
Simple test :
Dual Wan configured.
A FTP server on the LAN (192.168.0.254) port 21
Firewall , ipv4 config :
WAN   to   LAN     FTP     ALLOW always     Any         192.168.0.254     WAN1
WAN   to   LAN     FTP     ALLOW always     Any         192.168.0.254     WAN2
Then some testing using a FTP client outside the LAN, connection from Internet.
Then, changing ONLY the Wan Mode :
1/ Use only single WAN port : Dedicated WAN
==> FTP connect through WAN1
2/ Use only single WAN port : Optional WAN
==>FTP connect through WAN2
3/ Load Balancing
==>FTP connect through WAN1
==>FTP DO NOT connect through WAN1
Is that a bug or do I have some strange stuff somewhere ?
I will pick up another SA520W from stock, brand new, update the firmware, configure the 2 WAN (invering the 2 provider just in case) and do the same test.

VPN and a Dual Wan router confusion

I am running a Border Manager 3.9 server with a Dual Wan router supplying the 2 ISPs load balancing to a single NIC on the Border Manager Server. I want to try setting up a VPN.
Whats the easiest most pain free way of doing this?
Just wondering,
[email protected]

In article <[email protected]>, Rlmillies wrote:
> Whats the easiest most pain free way of doing this?
>
Hah! Well, inbound traffic in general can be problematical on a
dual-wan system.
Here you have two issues, if the router is like ones I've worked on.
First, load balancing. You can't (probably - this is based on my
experience) set up a static NAT of one of the public IP addresses to
the BM 'public' address and still load balance. My experience is that
as soon as you do that, it forces both inbound and outbound traffic
onto that particular WAN link, so it kills load balancing/failover.
Which means you need to do port forwarding on the router for all the
VPN ports. You will need TCP and UPD 353, and UPD 500 and 4500 inbound
(and replies outbound). If using a site-site VPN, you also need TCP
213 inbound.
You will have to configure the VPN address in BMgr to use one of the
WAN public IP's. The VPN will only work on that one WAN link.
Craig Johnson
Novell Support Connection SysOp
*** For a current patch list, tips, handy files and books on
BorderManager, go to http://www.craigjconsulting.com ***

Dual WAN and Log mail SMTP on RV082 ?

I use a RV082 with dual Wan and I cannot configure two SMTP.
Without authentication; a SMTP is specific of the provider.
When WAN1 comes down, SMTP to be used is the SMTP corresponding to WAN2 and vice versa.
Implementation of authentication with the mail server wil be useful.
Possibility of two mail servers with indication of the corresponding WAN is also useful.

I don't know how or if it's possible to set up two SMTP servers, but I know that may ISPs block SMTP traffic that is not directed to one of their SMTP servers. You could try picking just one SMTP server, and find out if it can be conacted on a non-standard port. A lot of SMTP providers allow for this.
If you can configure a single SMTP server on a non-standard port, you should be able to conatct that SMTP server from anywhere on the internet because the traffic won't be blocked (at least not port-based blocking, which is what most ISPs use).
So in a scenario where WAN1 is the ISP who owns the SMTP server and WAN2 is a diferent ISP that blocks standard SMTP traffic...
1) If both WANs are working, SMTP traffic goes out WAN1. No problem.
2) If only WAN1 is working, SMTP traffic goes out WAN1. No problem.
3) If only WAN2 is working, SMTP traffic goes out WAN2, but is not blocked because it is on a non-standard port. No problem.
I hope that helps.

LRT224 and Spotify/port forwarding on dual WAN set-up.

Very pleased with the LRT224, which was easy to set up (dual WAN, one cable modem, one VDSL). I'm using it for a small home-based business with several PC's, and it's worked a dream in the load-balancing mode. My request is beyond my current technical knowledge, however: we have Spotify on one PC for "background entertainment". It's a total bandwidth-hog, so I'd like to set it up to use the slower of the two WANs (VDSL) only. I'm something of a newbie to the techniques of port forwarding, so I'd be really grateful if someone could describe the steps to bond all Spotify inbound/outbound traffic to WAN2. Is this even possible...? Thanks in advance - Steve

You can define a specific IP addresses or specific application service ports to go through a user-assigned WAN for external connections via Protocol Binding. Just bind the MAC address of your device to an IP address to properly route traffic to the specific device by IP and MAC binding.

Cisco RV042 - Dual Wan Load Balancing - Secure Site (HTTPS) Trouble

PID VID :
RV042 V03
Firmware Version :
v4.0.0.07-tm (Aug 19 2010 19:19:50)
Ever since I setup my RV042 with load balancing using the Dual Wan system I have had trouble staying connected to some secure sites. After doing some searching I found that the potential issue is the IP change mid session.
"http://www.broadbandreports.com/forum/r25537589-Cisco-RV042-can-not-use-load-balancing-for-some-web-sites"
Although my interface is significantly different I was able to find the same area in my RV042 admin area however, it doesn't seem to work.
System Management
> Dual Wan
In Wan 1 & Wan 2 I have HTTPS and HTTPS Secondary all forwarded to use Wan 2 under Protocol Binding
This however has not managed to do anything at all for my network and every computer conneceted experiences the same HTTPS irregularities at some websites.
I'm sure I must be doing something wrong, but I don't know what it is.
Both incoming connections are from the same service provider although the plans are different.
Any help with this would greatly help me stop losing my mind trying to fight with my website control panel for 10 minutes to just login and get something done.
Thanks

Any ideas or advice from anyone?

Trend Micro Dual WAN Issue

Question from a partner:
Has Trend fixed the hosted issue with two WAN connections? It used to be that even though your device had dual WANs, Trend would only forward the emails to one of the connections. If it went down, you had to submit an email request to move it to the other connection and it could be 12-24 hours before it went into effect and 99 times out of 100, the original WAN port would be back online. It does slightly defeat the purpose of having Dual WANs if you cannot receive email in this day and age.
Any help out there?
Art

I got with Trend on this because I thought it was something very interesting....
here is what they said...
I think you’re talking about the same setup as a customer having 2 mail servers, right? If so we have had a solution for this for a while.
They want us to send email to 1.1.1.1, but if that is down, send it to 2.2.2.2.
They would use the MX record method.
A customer would need to create a hostname that points to two MX records.
Give the primary site IN MX 10 and the backup IN MX 20.
Then we change the IMHS configuration to use the hostname they created.
>cat imhs.multiple.customer.mailservers
Hello,
Our postfix servers will only allow us to configure 1 IP address or 1 hostname in our transport file to deliver email back to the customer. If the customer has 2 or more mail servers they want us to use, they will need to create a new hostname DNS entry and point it to their multiple servers.
If they want our servers to try to deliver the email to their mail servers in a specific order, say mailserver1 and if that server is not available then try to deliver the email to the mailserver2, then they would need to setup the following DNS entries as an example:
mailserver1.customerdomain.com.    IN A 1.2.3.4
mailserver2.customerdomain.com.    IN A 2.3.4.5
imhs.customerdomain.com.   IN MX 10 mailserver1.customerdomain.com.
imhs.customerdomain.com.   IN MX 20 mailserver2.customerdomain.com.
Then we setup our server to deliver to imhs.customerdomain.com.
customerdomain.com     smtp:imhs.customerdomain.com:25
If a specific order is not important then they can just make imhs.customerdomain.com point to multiple IP addresses:
imhs.customerdomain.com.   IN A 1.2.3.4
imhs.customerdomain.com.   IN A 1.2.3.5
This will make our server send an email to 1.2.3.4 and the next email to 1.2.3.5, then to 1.2.3.4, etc.
Then we setup our server to deliver to imhs.customerdomain.com.
customerdomain.com     smtp:[imhs.customerdomain.com]:25
Our servers will only deliver the email to the first server that will accept the email. They will not deliver the same email to both mail servers.
I hope that is detail enough,
Regards,
Nosa

Lrt224 dual wan router

Hi im new in dual wan setup. Please help.
Heres my problem
Wan 1 dynamic globe telecom primary
Wan 2 static pldt telecom
Link failover mode
1 router is plug in to lrt224 to serve wifi and my switch also plugin to the wireless wifi
1 cctv dvr connected to lrt224 port 9000 webport 9100 with auto detect settings setup
Now:
Sometime cctv camera broadcast to public ip when switch to wan2 but sometimes cant show also
Same way around with dynamic wan 1 as primary
Solved!
Go to Solution.

Thanks Guys, its a big help.......

RV325 Dual WAN Router - Use only one IP

I have a rv325 dual wan router. I have setup load balancing on the router, but I don't want one of the servers here being load balanced. How do i set it to only use a specific WAN while everything else is load balanced?

Michael,
I like to share link that will has a step by step screenshots on how to configure protocol binding. Your source ip will be server and Destination is whichever WAN you are shaping that traffic. Hope this helps
Article ID: 4242
http://sbkb.cisco.com

Linksys RV016 and two WANs (cable+DSL)

Is there any good description how to configure Linksys RV016 for two WANs (cable+DSL)? It looks like switching between those two connections not splitting what is set for WAN1 and what is set for WAN2.
I set load balancing as
- WAN1 (cable) all HTTP up/donw should go there
- WAN2 (DSL) GTalk, IMs, SMTP, POP3, IMAP up/down should go there
but looks like is not working that way.
When I will go to speedtest.net and test a connection I always get less amount then connected directly through cable :\ Also when people try to use any session or IP sensitive web site it doesn't let them to log in because session was expired (based on IP) or IP was changed.
Thanks for any help.

Enrique,
On the RV082:
System Management-> Dual-WAN
Change to Load Balance (Auto Mode) At the bottom of the page you will now see Protocol Binding
Select HTTPS [TCP/443~443] from the dropdown
Select the source IP or IP range: (i.e. 192.168.1.100 to 150) This will bind HTTPS for any LAN device that uses an IP in this range.
Select the Destination IP: Usually leave at 0.0.0.0 to 0.0.0.0 for ALL destinations
Select the Interface to bind the protocol to (WAN1 or WAN2)
Check the Enable box and Add to list. Save Settings at bottom of page.
On the RV016:
System Management-> Multi-WAN
Look for Interface Setting and select Edit for WAN1.
Follow the steps from above.
Please let us know if this helps or if you need further assistance.

Cisco RV320 DUAL WAN router USB setup with Telstra 4G MF823

I am trying to setup Cisco RV320 DUAL WAN router to work with my prepaid Telstra 4G MF823 device. Could you please assist. My settings are as follows: InterfaceUSB2Connection Type:3G/4G PIN Code:Confirm PIN Code:USB Connection Status:3G/4G modem is not available.Access Point Name:telstra.internetDial Number:Username:Password:Enable DNSDNS Server (Required): 8.8.8.8DNS Server (Optional): 8.8.4.4MTU:AutoManualB

Hi oz000,
Unfortunately we don't have anyone here to assist with this particular issue. Our team here provides assistance for the device standalone, we ensure that the 4G device connects to the network and functions correctly on its own.
-Matt W

OnPlus Dual WAN monitoring

Is there any way to get a single OnPlus to monitor two (or more) WAN connections at a customer site simultaneously?
I have customers that use dual wan routers (RV's and ISA's) that I would like to be able to only roll-out a single OnPlus to instead of needing to roll-out One OnPlus for each WAN and then policy route them over each individual WAN link.

The short answer is yes.
I'm assuming the dual internet connections are setup to either load balance or failover. In either situation, technically speaking, OnPlus would never lose connection unless both connections go down and thus would never alert.
So the way that I would go about monitoring both connections with a single OnPlus would be to ensure that ICMP is allowed outbound through your client's firewall. Then, after the ON100 is deployed and completes discovery, I would manually add 2 devices, one for each internet connection. I would make those devices the circuit endpoint at each provider, which is generally the gateway addresses your border router/firewall uses. I would then use ICMP monitoring on each of those devices in OnPlus to alert if it loses connection.

RV082 used dual wan download speed slow

Hi
I have a RV082 and I used dual wan , every ISP downstream is 10MB/s. two ISP downstream total 20Mb/s.Rv082 use loadblance mode,but total Lan PC download speed was 30kb/s-90kb/s,is very slowly .I find similar question inthe forum ,but i can not .please help me
thanks

Ok, several things here:
- Make sure that when you connect every individual LAN you get the full downstream speed.
- Make sure that it is not a PC problem, check with different PC's to see if the speed is the same on all of them.
- Download latest version of Firmware, you can get it from the cisco website, here is the link: http://tools.cisco.com/support/downloads/go/PlatformList.x?sftType=Small+Business+Router+Firmware&mdfid=282414011&treeName=&mdfLevel=null&url=null&modelName=Cisco+RV082+8-port+10%2F100+VPN+Router+-+Dual+WAN&isPlatform=N&treeMdfId=&modifmdfid=null&imname=&hybrid=Y&imst=N
- If you have to apply the new firmware make sure that you reste the device to factory defaults aftre the upgrade.
- Disable SPI under the firewall settings.
Hope this helps.

SA520 and dual wan

Similar Messages

Maybe you are looking for