Guest User!

You are not Sophos Staff.

Thread Info
  • State Verified Answer
  • Locked Locked
  • Replies 2 replies
  • Subscribers 26 subscribers
  • Views 531 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

question about XG 310 load balancing

EEVW

We have 3 lines

Line A:
- has a fixed public Ip
- is needed for authentication with MS services (Exchange365 and others). Certain requests to MS have to be initiated over this fixed Ip
- is part of a VPN
- has the lowest bandwidth

Line B and C
- have no fixed public IP's
- have the highest bandwidth
- Part of line B (10 Mbit/s) is needed for SIP. The rest (40 Mbit/s) should be used for http/https traffic.

Goal:

- VPN and authorization connection to MS via line A
- otherwise traffic should be distributed equally over line B and C.

Currently all -3- lines in the WAN link manager have "Weight = 1" .

Under "SD-WAN policy routing" it is defined that certain requests to MS should be sent via line A.
The last rule in "SD-WAN policy routing" states that all http/https traffic should be sent over line B with backup line C.

We have the impression that the http/https traffic is now routed via line B and that line C is not used.
When there is a lot of traffic, we observe that line B is fully used, while there still seems to be a lot of free bandwidth on line C.

regards

ed



This thread was automatically locked due to age.
Parents
  • +1

    I would put the line with the fixed IP as backup wan, and create sd-wan route to use it every time you want to use the fixed IP to a destination. fyi, backup line does not say it is off... it is on the whole time also for management from outside or to publish servers.. Just outbound will not go through the backup automatically unless you manually route it. 

Reply
  • +1

    I would put the line with the fixed IP as backup wan, and create sd-wan route to use it every time you want to use the fixed IP to a destination. fyi, backup line does not say it is off... it is on the whole time also for management from outside or to publish servers.. Just outbound will not go through the backup automatically unless you manually route it. 

Children