This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Downloads on Connection1, Uploads on Connection2 ?

Hi Guys,

Basically we've got :

2x Sophos SG-310 (Active/Standby) Cluster
1x ADSL WAN (15Mbps downlink & 1Mbps Uplink) – 192.168.0.1 :: Connected to ETH1 on Sophos
1x Fibre WAN (10Mbps downlink & 10Mbps Uplink) – 192.168.1.1 :: Connected to ETH7 on Sophos

And what we wish to achieve is the following :

1. Use the ADSL WAN for all the downlink only. This is because this connection has higher download speeds and has unlimited download quota.
2. Use the Fibre WAN for all the uplink only. This is because this connection has higher upload speeds and has unlimited upload quota.
3. Use the above 2x WAN links so if one fails the other one takes over temporarily.

Whats the best way to go about it ?

Thanks..

This thread was automatically locked due to age.

0 skm over 10 years ago

Interfaces & Routing>Static Routing>Policy Routes
Cancel
Vote Up 0 Vote Down

Cancel
0 jazzoberoi over 10 years ago

Hi SKM,

Thanks for your reply.. could you please give me an example on how to achieve this using policy routing as i was trying to achieve the same using multipath rules and wasn't getting anywhere..
Cancel
Vote Up 0 Vote Down

Cancel
0 skm over 10 years ago

You cannot change path which traversing IP packets to you (download) if you dont have BGP session with your ISP and appropriate BGP policy agreement. If you want to change upload path/interface then you have to configure Interface rule under Interfaces & Routing>Static Routing>Policy Routes and:
Source Interface:
Source Network: any
Service: any
Destination Network: any
Target Interface:

This rule should make that all trafic from internal Interface will run through external Interface. You can check this with tcpdump form cli on sophos.

For uplink failover use uplink monitoring.
Cancel
Vote Up 0 Vote Down

Cancel
0 jazzoberoi over 10 years ago

Hi SKM,

Unfortunately, it is still not working.. I've tried Policy routing and multipath rules.

My config is as follows :

Interfaces - http://i.imgur.com/cTxc8gh.png
Uplink Balancing - http://i.imgur.com/a2UjqdI.png
Multipath Rules - http://i.imgur.com/ens8SK7.png
Static Routes - http://i.imgur.com/PQsPqIk.png
Policy Routes - http://i.imgur.com/UXmNV4e.png
Firewall Rules - http://i.imgur.com/M83zgwJ.png
NAT Masquerading - http://i.imgur.com/e3Oc0b8.png

In regards to BGP, i found the following info on my ISP's website - Telstra IN:SIGHT - Telstra Internet Direct (TID) - Telstra Business & Enterprise - IN:SIGHT

As i'm not too familiar with advanced routing protocols, i cannot properly interpret it.

In my circumstance, whats the best way to utilize the high download speeds and unlimited download quota of my ADSL WAN connection and make the most of high upload speeds and unlimited upload quota of my Fibre WAN connection ?
Cancel
Vote Up 0 Vote Down

Cancel
0 skm over 10 years ago

I dont know why it is not working now.

Leave BGP. You dont need it now.

If you want to utilize upload links, you should define which source ip uploading to which Servers and configure policy Routing for that traffic. I would leave other traffic to go through download link.

EDIT

Maybe it doesnt work because of #3 rule: https://community.sophos.com/products/unified-threat-management/astaroorg/f/51/t/22065

You have to dig a littlebit [;)]
Cancel
Vote Up 0 Vote Down

Cancel
0 BAlfson over 10 years ago

Hi, jazz, and welcome to the User BB!

Neither your PC nor the UTM can know if a particular HTTP or FTP connection is to be established for an upload or a download. You can achieve failover by binding outbound traffic for specific services (ports) to a specific interface in Uplink Balancing Multipath rules. That's probably the easiest way to accomplish what you want.

Cheers - Bob
Cancel
Vote Up 0 Vote Down

Cancel