Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 26 replies
  • Subscribers 28 subscribers
  • Views 9470 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Failover WAN not failing over

M8ey

Hey guys,

 

So I have 2 WAN links - one is Active and one is Backup - set to failover if the Primary fails by TCP not hitting 4.2.2.2 on Port 80 after 5 sec.

My Primary WAN port is Port 3 and shows Disconnected

My Back up Port is Port 8 and shows Connected

 

No matter what I try I cannot get the XG to failover to the backup connection.

Even swapping Active and Backup will not make them work.

 

In the FW rules I have  Primary and Secondary connection but they should fail over.

 

What am I missing?



This thread was automatically locked due to age.
Parents
  • 0

    Hi M8ey,

    You will need to make sure both gateway status are Green under Network>WAN link manager
    If any of these are not Green that means, it's not connected to ISP/4G

    Edit the Active gateway and make sure failover rules are set as below

     

  • 0 in reply to Krunal Patel

    Hey Krunal,

     

    Yes this was configured correctly and the XG does fail over to the backup WAN.

     

    Just wont pass traffic from the LAN (Read previous posts) - the Sophos Engineers are a little stumped as well.

  • 0 in reply to M8ey

    Do you have Web policy applied to the existing firewall rule?

    Use Log viewer> Policy test to see which firewall rule is blocking outgoing traffic.

    I would suggest to create a new firewall rule on TOP of the list, allow all LAN TO WAN Traffic from your static testing device, no user authentication, no web, no scanning and apply NAT. Select 1 ISP at a time.

  • 0 in reply to Krunal Patel

    Yes we have tried all that Krunal.

     

    Its not a FW rule blocking - its FW = 0 VIOLATION - Sophos Level 2 cannot work out why either :-)

     

    Basically no matter what rules are in place  - as soon as it fails LAN gets blocked.

Reply Children