topic Re: Two ISP for default route with failover issues in Firewall and Security Management

Two ISP for default route with failover issues

tiagosilva — Fri, 03 Jun 2022 13:33:26 GMT

Hi guys,

I have a clusterXL, in cloning group, ith two internet service providers and one ot them gave me a /30 network. To keep my VIP working was necessary create a different subnet that the ISP gave me.

Becouse that, isn´t possible to use ISP Redundancy. So, I tried to configure my default route with two gateways with different priorities. ISP 1 with priority 1 and ISP 2 with prioritie 2. All them have a "PING" enabled and "IP Reachability Detection" enabled with external addresses to test.

When my ISP with prioirty 1 fails, the backup ISP doens´t take on the internet requests from my network.

Are there some other configuration to do?

Re: Two ISP for default route with failover issues

Chris_Atkinson — Fri, 03 Jun 2022 13:37:28 GMT

Do you see the route change if you check it via the CLI and how is NAT configured on the Gateway?

Re: Two ISP for default route with failover issues

the_rock — Fri, 03 Jun 2022 13:40:46 GMT

I configured this for customer last year and definitely works fine. I assume you are using primary/backup? Can you do some captures and traces to see why its failing when connections go to your secondary link?

Re: Two ISP for default route with failover issues

tiagosilva — Fri, 03 Jun 2022 14:17:46 GMT

When the ISP with priority 1 fails, the default route disappear. The NAT is enabled on the gateway, "Hide internal networks behind..."

Re: Two ISP for default route with failover issues

tiagosilva — Fri, 03 Jun 2022 14:18:29 GMT