Print

Please login or register.
1 Hour 1 Day 1 Week 1 Month Forever
Login with username, password and session length

[addicted]

Dear All

I have one DFL-800 Firewall working properly

Recently I got one more WAN connection as the WAN2 connection could not be upgraded more than 1 MBPS

WAN2 is a 4MBPS connection. Now I have WAN1 - 1MBPS & WAN2 4MBPS

I would like to setup my network which is on 192.168.0.1-192.168.0.255 to use both wan connections same time for more faster access to users

The problem is I dont want Secure connections on WAN2. only Yahoo / MSN / other chat programs and HTTP only if possible should be routed on WAN2. WAN1 should provide SECURE connectivity

Please advise possibility and a solution

regards

[Fatman]

Unfortunately this device does not support dynamic load balancing, which is what it looks like you are trying to describe.

We do support static load balancing, which would allow you to specify a routing table (and thus a WAN) for traffic based on source or destination, network or interface as well as service and schedule.  For this you will need to use routing rules.

The good folks in business class support can walk you through all of this.
1 877 354 6555.

[addicted]

I do have both the WANs on Static IP

WAN1 - 192.168.0.200

WAN2 - 192.168.1.200

LAN network is on 192.168.0.1- 192.168.0.250

[Fatman]

When I referred to static or dynamic load balancing I was not referring to how you assign your WAN IP.

I was referring to how the traffic is routed, either statically across both WANs using hand crafted routing rules or dynamically based on a load balancing algorithm.  the DFL-800 does not do it dynamically, only via static routing rules.

P.S.  If your WAN1_Net is truly the same as your LAN_Net your are going to have some alot of issues.

*** Edited by Fatman because he speaks the bestest english of whole class. ***

[addicted]

thanks a lot for your reply

I would like to do it statically but lack of some knowledge

Can u please guide a little

Regards

[Fatman]

You are going to have to create 2 routing tables, one which has a WAN1 default route with a lower metric and one that has a WAN2 default route with a lower metric.

I would ensure that all default gateway routes have route monitoring tuned on so that you can fail over in both directions.

You are going to need to add routing rules specifying types of traffic and their routing table.

You are going to need IP Rules allowing the traffic to pass over whichever WANs you with it to legally pass over.

This document may assist you in this.

http://security.dlink.com.tw/support_ds_view2.asp?ModelSno=IR&DownloadFileType=5&LinkFrom=document&Sno=HOKL

[addicted]

Sorry to bother you but one more thing to clarify

in my scenario I have WAN1 Proxy connection. I have to authenticate on every request

WAN2 is direct

Will it effect any thing

Also is there a possiblity that HTTP, TCP,UDP traffic could go through WAN2 and HTTPS only i.e secure connections should go through WAN1

[addicted]

basically I m running a internet cafe. any other suggestion is also welcome

[Fatman]

No bother at all, don't worry.

in my scenario I have WAN1 Proxy connection. I have to authenticate on every request

WAN2 is direct

Will it effect any thing

I assume you mean an HTTP proxy with HTTP authentication, no it should not be an issue, but keep in mind if you need to ensure that HTTP flows through that proxy it will need to have a routing rule specifying HTTP and the routing table that places that WAN first, or one with only that WAN (to prevent fail over to a non proxies WAN).  This does not appear to be the issue however based on your next question.

Also is there a possiblity that HTTP, TCP,UDP traffic could go through WAN2 and HTTPS only i.e secure connections should go through WAN1

Absolutely, the purpose of routing rules is to direct specific traffic out a particular WAN.  Simply specify those services and their WANs when setting up your routing rules.

[addicted]

Dear Sir

trying for the past 2 days but invain

any possibility for a config file from your side which i can upload

or if u can remotely config and help me

please advise

Regards

[Fatman]

Unfortunately I do not have a config file prepared for your exact scenario, for more hands on support you may want to call the number I referred you to earlier.  This is an fairly advanced implementation and is fairly difficult to transcribe via the written word.

[addicted]

Dear Sir,

Really appreciate the support u have provided me uptil now

As far as the Support through telephone is concerned, I have called the mentioned number but they need US telephone number which I cant provide due to my location i.e. UAE- Dubai

Dlink Support Dubai is not providing even this much information which you have provided me

If possible, can u provide a dummy config for both WANS to work. IP rules ill add by my scenario

Please advise

Thanks again

Regards

[addicted]

Dear Fatman

I had somehow manage to enable routing rules

Please help in following:

Routing Table Created ordering First

In routing Rules I have created two rules allowing services on WAN2 and WAN1

Service enabled : HTTPS Service

Standard Services : All_TCP_UDP

When I disable standard services, HTTPS is going through WAN1 as I need. but when I enable standard services it stop responding. HTTP works good and through WAN2 only

MSN and Yahoo also not working

Please advise possibilities

regards

[Fatman]

I would check your IP Rules first to ensure that they are allowing traffic out whatever WAN that traffic should be escaping.

[addicted]

Dear Fatman

Thanks a lot for your help in my entire config.

At present everything working cool. here is my one more question:

My Configuration is
3Com ADSL Modem Router - 1mbps with static public ip of 83.xxx.xxx.xx
3Com ADSL Modem Router - 4mbps with dynamic public ip of 96.xxx.xxx.xx

Both the WANs getting connected to DFL-800 WAN1 & WAN2 respectively

As discussed before, secure connections are going through WAN1 i.e of static public IP. most of the websites are recording my ip of 2nd WAN i.e dynamic one cause http is on wan2

Is there any way i can show only my static ip (WAN1 IP) for every trace or website logs

Thanks in advance