Print

Please login or register.
1 Hour 1 Day 1 Week 1 Month Forever
Login with username, password and session length

[otrotabi]

Hi. I need to connect a second VDSL internet modem to our DFL-210 firewall. As far as I have read, this is possible but I have not been able to find out where I should connect the second internet input, as our firewall has only one WAN port. Should I connect it to a different LAN port ?

So far our internet connection input is through the WAN port, and then we connect a LAN PORT to a switch where the rest of our internal computers are connected.

Thanks for your help 

[FurryNutz]

Link>Welcome!

• What region are you located?

WAN Port is for the main ISP connection from a cable or DSL modem.
DMZ port is for the connection of an Ethernet cable to an DMZ network.

I don't see two actual WAN ports needed for fail over of ISP services from using two modems.

[otrotabi]

Thanks,

I am not in USA I´m afraid but hoping to get a little help. I´m located in Argentina.

There´s a configuration example from D-Link called "Scenario: How to configure WAN load sharing and failover for two ISPs using policy based routing" which seems to apply to DFL-210/800/1600/2500 according to the note. I downloaded it from here (https://dlink-manuals.org/dlink-howto-configure-wan-load-sharing-and-failover-for-two-isps-using-policy-based-routing-on-dfl-210-800-1600-2500/). Unless this is wrong, it seems possible to use 2 ISP with a DFL-210.

However this note covers only the software issue, not where to connect the second wan. If you could just tell me that I will try to follow this example.

Thanks again.

[FurryNutz]

That document mentions the use of WAN1 and WAN2 interfaces. These are actual physical LAN cable PORTs on the back of the firewall appliance device. If this model DFL does not have two physical WAN ports, then maybe either configuration is done in the UI and maybe the 2nd ISP modem is connected to the DMZ port maybe. I don't know for sure.

I recommend that you phone contact your regional D-Link support office and ask for help and information regarding this. We find that phone contact has better immediate results over using email.
Let us know how it goes please.

Also FYI:
"This product has been discontinued.
Free support for this product has ended on 11/01/2016"

Maybe time to get a newer generation firewall appliance that supports two WAN ports.

[otrotabi]

Thanks. Yes I did try phone support a week ago but I still have no answer from an engineer, so I figured I would give it a try here. Maybe it´s because of the end of support date you mention.

I am trying to figure out which new appliance to buy. I admit D-link works fine but has turned out to be very difficult to configure for me.

Regards

José

[FurryNutz]

Ya possible they may not support it anymore.

I don't see any newer generation firewall devices on there web site. D-Link may not be Mfr'g newer models.
You may want to review this line of router which has dual WAN port support and seems to have fail over support:
http://us.dlink.com/products/business-solutions/unified-services-router-w-wan-failover/

[otrotabi]

Thanks for your suggestion. From a quick look at our local market it seems D-link has retired from this business, at least here. I was looking at Cisco´s RV-042, it looks easier to configure for a non-expert. Small company, 2 servers that are accesed only from the local LAN and only one place from outside, what do you think ?

[FurryNutz]

Ya, D-Link seems to have scaled back on a few areas and product lines. I would go with something that is easy to use and best suites your needs. Make contact with Cisco about the model your looking at and ask questions and make sure you get all the information you need before purchasing. I'm sure you'll be fine.

[otrotabi]

In case anyone has the same doubt I had, I got an answer from a Dlink engineer saying that for the DFL-210, the DMZ connection shoud be configured as WAN2. I will try to replicate the application note and see if it works.

[FurryNutz]

Let us know how it goes.

[FurryNutz]

Where you able to get this going? Any progress on this?

In case anyone has the same doubt I had, I got an answer from a Dlink engineer saying that for the DFL-210, the DMZ connection shoud be configured as WAN2. I will try to replicate the application note and see if it works.

[gouster4]

Change DMZ Route metric to 80, then create ip rules same as lan_to_wan, but for dmz instead of wan.

[FurryNutz]

Awesome info. Thank you for sharing. Hope this helps future users.

Enjoy.