D-Link Forums

The Graveyard - Products No Longer Supported => D-Link NetDefend Firewalls => Topic started by: EUCC on March 18, 2010, 12:06:02 AM

Title: WAN1 for all, WAN2 for just 1 computer [SOLVED]
Post by: EUCC on March 18, 2010, 12:06:02 AM

Hello,

I'm facing this problem here with a DFL-800. I have WAN1 and WAN2 with 2 different ISP's. I need that everyone in the company goes through WAN1 to the Internet, but I need that just 1 computer (with a static IP address) goes through WAN2.

I've tried with 2 IP rules. One of the rules is:

Source Interface: lan
Source network: lannet
Dest Interface: WAN1
Dest network: all-nets

Andthe other is:

Source interface: lan
Source network: IP of the computer I need
Dest Interface: WAN2
Dest network: all-nets

But this is not working. Any ideas will be apreciated.

Thanks in advance.

Title: Re: WAN1 for all, WAN2 for just 1 computer
Post by: Fatman on March 18, 2010, 10:12:41 AM

You need a routing rule and a routing table.  The routing table will have WAN2 as it's first WAN and the routing rule will specify that for that PC you will use the table you just created as your forward table and main ad your return table.

Title: Re: WAN1 for all, WAN2 for just 1 computer
Post by: EUCC on March 21, 2010, 11:40:43 PM

Wll I need another routing table for the rest of the computers? Or they will go by default through WAN1?

Thanks

Title: Re: WAN1 for all, WAN2 for just 1 computer
Post by: danilovav on March 22, 2010, 06:14:25 AM

Yes, you need

1. Routing > Routing tables > Add routing table (ex, alt_wan2)

2. Add into this table route for all-nets to wan2 (if need, don't forget about gateway)

3. Routing > Routing rules > Add PBR
lan/yourhost wan1/all-nets, forward alt_wan2, return main

4. Interfaces > Interface groups
Add group "wans" with wan1, wan2

5. On Rules > IP rules > lan_to_wan1, replace wan1 to wans in NAT rules

Title: Re: WAN1 for all, WAN2 for just 1 computer
Post by: EUCC on March 23, 2010, 12:13:28 AM

Thanks very much danilovav.

Just for reference, what should be the metric for WAN1 and WAN2?

Regards

Title: Re: WAN1 for all, WAN2 for just 1 computer
Post by: danilovav on March 23, 2010, 04:40:37 AM

Doesn't matter, because in "main" routing table you have only one route - to WAN1, in "alt" - only route to WAN2. For example, set it as default, to 100.

Title: Re: WAN1 for all, WAN2 for just 1 computer [SOLVED]
Post by: EUCC on March 25, 2010, 12:24:54 AM

Thank you very much danilovav, I really appreciate your help.