ISP redundancy on SMB

[bobby_adamov]

Here is the issue we have a 1550 appliance and we are wanting ISP redundancy, the WAN port would be primary and another port would be segmented for Internet for secondary, we did this before took us 2 weeks to get it working than it failed, it appears that in theory it is supposed to work, but in practicality it does not, we have seen it first hand.. Does anyone know how we can make this work, l we also have the 1550 connected to Smart 1 Cloud. Does it have to be configured in the cloud?

[PhoneBoy]

When you say “fail” what is the exact behavior?
What is the precise configuration with the Internet connections?
Screenshots will be helpful.

Do you see any messages in the logs?
Also, what version of firmware is this?

[bobby_adamov]

It had something to do with the Smart 1 Cloud is what the techs said, the ISP redundancy is configured on the 1550 and not the Cloud which was causing an issue since all the policies are passed down to the 1550 from the cloud, sorry we don't have any screenshots, this has been over a month ago..

On the 1550 it only has 1 WAN, so we took LAN2 and made it a WAN port and assigned it to the secondary ISP with its static IP..It kept giving up probing errors, and the techs were telling me that this was because of the Smart1 Cloud, 

[bobby_adamov]

Than we applied ISP redundancy to the 2 ports and gave them a rating so they would fail over

[the_rock]

Ok, so since you mentioned smart-1 cloud, its centrally managed appliances. Now, Im a bit confused by what they told you...ISP redundancy is actually NOT configured on the appliances themselves, its set via the object in smart dashboard, you just need to have at least 2 IPS links available on the firewalls (up to 10 supported in R81.10). I wish you had bit more details, but I cant logically see how probing errors could be because of smart-1 cloud, that does not sound logical to me.

[K_R_V]

ISP redundancy for centrally managed SMB appliances is configured on the appliance itself, only for the VPN , you should configure the LS or HA settings.

We have configured this with smart-1 cloud and it is working, unfortunately we have some hiccup's in the last version. The MAAS tunnel is working over both links.

[G_W_Albrecht]

So do you still have a CP TAC ticket open that is worked upon ?

[the_rock]

When you say took 2 weeks to get it working and then failed, can you expand little on that statement please? What was the holdup to get it working? And also, any idea what would have caused it to fail? Im with @PhoneBoy on this, we need screenshot, at least some relevant logs to be able to help.

Andy

[_Val_]

Please review the centrally managed admin guide, specifically the Internet connectivity section, and let us know where it fails.