topic Re: ISP redundancy on SMB in Spark Firewall (SMB)

ISP redundancy on SMB

bobby_adamov — Wed, 04 Jan 2023 22:14:32 GMT

Here is the issue we have a 1550 appliance and we are wanting ISP redundancy, the WAN port would be primary and another port would be segmented for Internet for secondary, we did this before took us 2 weeks to get it working than it failed, it appears that in theory it is supposed to work, but in practicality it does not, we have seen it first hand.. Does anyone know how we can make this work, l we also have the 1550 connected to Smart 1 Cloud. Does it have to be configured in the cloud?

Re: ISP redundancy on SMB

PhoneBoy — Wed, 04 Jan 2023 23:37:40 GMT

When you say “fail” what is the exact behavior?
What is the precise configuration with the Internet connections?
Screenshots will be helpful.

Do you see any messages in the logs?
Also, what version of firmware is this?

Re: ISP redundancy on SMB

the_rock — Thu, 05 Jan 2023 01:15:16 GMT

When you say took 2 weeks to get it working and then failed, can you expand little on that statement please? What was the holdup to get it working? And also, any idea what would have caused it to fail? Im with @PhoneBoy on this, we need screenshot, at least some relevant logs to be able to help.

Andy

Re: ISP redundancy on SMB

_Val_ — Thu, 05 Jan 2023 08:10:52 GMT

Please review the centrally managed admin guide, specifically the Internet connectivity section, and let us know where it fails.

Re: ISP redundancy on SMB

bobby_adamov — Thu, 05 Jan 2023 15:04:23 GMT

It had something to do with the Smart 1 Cloud is what the techs said, the ISP redundancy is configured on the 1550 and not the Cloud which was causing an issue since all the policies are passed down to the 1550 from the cloud, sorry we don't have any screenshots, this has been over a month ago..

On the 1550 it only has 1 WAN, so we took LAN2 and made it a WAN port and assigned it to the secondary ISP with its static IP..It kept giving up probing errors, and the techs were telling me that this was because of the Smart1 Cloud,

Re: ISP redundancy on SMB

bobby_adamov — Thu, 05 Jan 2023 15:05:17 GMT

Than we applied ISP redundancy to the 2 ports and gave them a rating so they would fail over

Re: ISP redundancy on SMB

the_rock — Thu, 05 Jan 2023 15:10:52 GMT

Ok, so since you mentioned smart-1 cloud, its centrally managed appliances. Now, Im a bit confused by what they told you...ISP redundancy is actually NOT configured on the appliances themselves, its set via the object in smart dashboard, you just need to have at least 2 IPS links available on the firewalls (up to 10 supported in R81.10). I wish you had bit more details, but I cant logically see how probing errors could be because of smart-1 cloud, that does not sound logical to me.

Re: ISP redundancy on SMB

K_R_V — Thu, 01 Jun 2023 12:38:05 GMT

ISP redundancy for centrally managed SMB appliances is configured on the appliance itself, only for the VPN , you should configure the LS or HA settings.

We have configured this with smart-1 cloud and it is working, unfortunately we have some hiccup's in the last version. The MAAS tunnel is working over both links.

Re: ISP redundancy on SMB

G_W_Albrecht — Tue, 06 Jun 2023 08:04:44 GMT

So do you still have a CP TAC ticket open that is worked upon ?