Using and Configuring DUAL WAN connection with XG 135

Hi Vicky,

I would recommend enabling the gateway soecific nat policy or just masq if you are using the primary address on each interface.

External DNS can geberally only point at 1 IP, yes so you will have to manually change. There are DNS services out there that can do health checking and dynamically change.

Emile

You want me to do some thing like  the below? 

Hello Vicky,

Yes, because that SourceNAT definition is one you have made so unless that IP in the Masq policy can be accessed from both interfaces it will fail on the other interface.

There is actually a definition called "MASQ" which just uses the primary address of the interface when it routes out, that is what I intended for you to use or if you needed to change the primary IP of the interfaces separately you would use the gateway-specific default NAT policy and configure the NAT policy in the WAN link manager.

Emile

If I define both the WAN connections under WAN Link Manager using steps (https://community.sophos.com/kb/en-us/132792) so my settings under firewall policy will be same as below? Is this WAN Link Load Balance is automatically managed by WAN link Manager? As it is not defined anywhere in the XG 135 web console.

Hello Vicky,

Yes, that is correct and will follow the weights or failover rules you have defined.

Emile

Last query: 

this article (https://community.sophos.com/kb/en-us/132792) is about Redundant Internet Connection i.e. both will be active at the same time:  

How the traffic will be in the above scenario i.e. which gateway will process the requests, also if applied , firewall rules will be the same as shown as shown in the pic below?

Moreover this article (https://community.sophos.com/kb/en-us/123530) is about load balancing and failover , Currently i am looking for active , passive , no load balancing is required, so again the same question if applied , firewall rules will be the same as shown in the pic below?

Hi Vicky,

All those features do exactly what they say on the tin.

Using "WAN Link Load Balance" enables the functionality you have set up in the WAN link manager. To take advantage of backup WAN connections that initialise when primary fails, you need to use that element.

The firewall rules stay the same.

Emile

Thanks !

Thanks !