Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.




2767 posts

Uber Geek
+1 received by user: 1435

Subscriber

Topic # 223246 20-Sep-2017 16:35
Send private message quote this post

I know enough about networking to be dangerous (did my CCNA R&S a few years ago) but I'm kind of out of my depth on this one.

 

First scenario:

 

If I have two home internet connections, say UFB and Cable or UFB and Skinny 4g, each connected via a standard ISP supplied router. I want devices on the network to switch to the secondary connection when the primary connection is down? Assume that for <reasons> I can't remove or replace the existing routers. I could conceivably put additional hardware between the network and those two routers, if I did so, what if anything could I put in to automatically route traffic down the primary connection when it's up, detect when it can't reach the internet through that connection and failover to the secondary connection, and flip back when required all automatically.

 

Second scenario:

 

Two business grade UFB connections, each a UFB ONT connected to Cisco ASA, Fortigate, Sonicwall or similar device. Probably each going to a seperate ISP. How do I have fully automated failover like above? Brain says VRRP or similar between the devices, but because they are connected to the ONT via ethernet, I think that as long as that ethernet connection is up, the failover wouldn't kick in? I'm thinking that if we had our own AS and were running BGP we could achieve this, but not 100% sure if that would and would prefer a cheaper option than buying IP's and paying money to APNIC every year anyways :-) The ideal solution should allow for connection A to be the primary connection B for local subnet X and Connection B to the primary connection for local subnet Y, and allow failover either way.

 

Is any of this possible? If so, how :-) 





Information wants to be free. The Net interprets censorship as damage and routes around it.

 

Thinking about signing up to BigPipe? Get $20 credit with my referral link.


Create new topic
3135 posts

Uber Geek
+1 received by user: 962

Subscriber

  Reply # 1869588 20-Sep-2017 17:21
2 people support this post
Send private message quote this post

All comes down to routing.

 

Scenario One is kind of crappy and you would hope that you would change the routers. But if you can't you would give each router's LAN an IP address on the same subnet. Have it all connected to the same network. Obviously only one should do DHCP, and the DHCP can hand out what you want your default route to be. If they have come from an ISP then they will both be NAT'ing so that stays as it is. After that, you would just go to your PC and set a static route with a higher metric (for windows anyway, also see terms like distance, weight etc). Then when your default route falls over, the secondary will kick in as your device just follows it's routing table.
Issue with this is it's a pain in the ass to go and set routes manually over all devices. Plus does not help with any inbound traffic unless you did something with dynamic DNS. Outbound DNS could be the issue too (if connections were from different ISP's and those servers were assigned to the client they wouldn't work outside of each network) so maybe a requirement to use 8.8.8.8 across the network too.

 

Scenario Two. Dead simple. Terminate both your WAN's on the router. Set your default route to the preferred WAN's gateway, and then have a second default route with a higher distance/weight/metric pointing to the secondary WAN's gateway. So when WAN 1 goes unreachable, the router will just use the second default route, when WAN 1 comes back online it all goes back to normal. Then your network's DHCP server can just tell clients to use your router as their default route, and the router will figure it out from there. Again, not helpful with inbound connections, but Dyn DNS could help with this.

 

BGP would be the VERY proper way to do this, but as you already pointed out, need to get a ASN, IP space and then a connection and ISP that will support it (don't think it would be possible over standard bitstream 2 products anyway and would need BS3 or higher, not too sure though).


92 posts

Master Geek
+1 received by user: 17


  Reply # 1869627 20-Sep-2017 17:58
One person supports this post
Send private message quote this post

check out sophos and set it up as a standby interface,i know you can run 2 sophos firewalls in conjunction with each other so if one dies the other will pick up and carry on, i have had a 2 degrees dongle working as a fail safe on a connection some time ago on sophos but that was a while ago


 
 
 
 


6916 posts

Uber Geek
+1 received by user: 2197

Subscriber

  Reply # 1869670 20-Sep-2017 19:00
2 people support this post
Send private message quote this post

we use a cisco router to do this at work (on a ship), cant remember the model. they arent internet connections but WAN connections  back to the rest of the network ashore.

 

we have fibre, wifi, 3g, low latency satellite, and higher latency satellite (more data) and each has a different cost rating, the router checks each connection and uses the active one with the lowest cost.

 

there is about a 3 minute delay in switching over so that it gives the connections a chance to get back online this stops its continually switching back and forth due to a small drop out.


2055 posts

Uber Geek
+1 received by user: 613

Subscriber

  Reply # 1869687 20-Sep-2017 19:17
Send private message quote this post

We use Cisco Meraki at work and have 2 MX100s in HA. The main firewall will ping various sites every few minutes to see if the connection is live. It's not the best solution out there as it takes a full 5 minutes (!!!) from primary internet failure to fail over to the backup connection. Usually if it fails I go and pull the ethernet from the internet side so it fails over quicker.

 

 

 

https://documentation.meraki.com/MX-Z/Firewall_and_Traffic_Shaping/Connection_Monitoring_for_WAN_Failover

 

 

 

 


1207 posts

Uber Geek
+1 received by user: 138


  Reply # 1869779 20-Sep-2017 20:39
3 people support this post
Send private message quote this post

We use 2 UFB connections and have them on automatic failover using Mikrotik - routing marks on the packets decide which traffic goes out which connection and if one or other goes down it automatically switches to the other connection - I would imagine that MT would be the most cost effective solution for you.


'That VDSL Cat'
6527 posts

Uber Geek
+1 received by user: 1245

Trusted
Spark
Subscriber

  Reply # 1869795 20-Sep-2017 20:50
Send private message quote this post

I use pfsense with my two dsl connections.

 

 

 

sessions are marked to use the correct wan, failover for high utilization or port down (PPPoE sessions terminated on box so it knows exactly when PPP is lost)

 

Downtime with this is normally sub 20 seconds however rare to actually have drops in my case.





#include <std_disclaimer>

 

Any comments made are personal opinion and do not reflect directly on the position my current or past employers may have.


157 posts

Master Geek
+1 received by user: 20


  Reply # 1870092 21-Sep-2017 11:02
Send private message quote this post

The Sonicwall has WAN Failover/Load Balancing built in. You simply connect your two ISPs. For failover it can use link failure and/or logical probing (probes up to two upstream targets using either ICMP or TCP). Failover time depends on your failure setting (ie 3 failed probes at 5 second intervals = 15 second failover time).


Create new topic



Twitter »

Follow us to receive Twitter updates when new discussions are posted in our forums:



Follow us to receive Twitter updates when news items and blogs are posted in our frontpage:



Follow us to receive Twitter updates when tech item prices are listed in our price comparison site:





News »

Vodafone TV — television in the cloud
Posted 17-Oct-2017 19:29


Nokia 8 review: Classy midrange pure Android phone
Posted 16-Oct-2017 07:27


Why carriers might want to embrace Commerce Commission study, MVNOs
Posted 13-Oct-2017 09:42


Fitbit launches Ionic, its health and fitness smartwatch
Posted 12-Oct-2017 15:52


Xero launches machine learning automation to improve coding accuracy for small businesses
Posted 12-Oct-2017 15:45


Bank of New Zealand uses Intel AI to detect financial crime
Posted 12-Oct-2017 15:39


Sony launches Xperia XZ1, a smartphone with real-time 3D capture
Posted 11-Oct-2017 10:26


Notes on Nokia’s phone comeback
Posted 10-Oct-2017 10:06


Air New Zealand begins Inflight Wi-Fi rollout
Posted 9-Oct-2017 20:16


The latest mobile phones in perspective
Posted 9-Oct-2017 18:34


Review: Acronis True Image 2018 — serious backup
Posted 8-Oct-2017 11:22


Lenovo launches ThinkPad Anniversary Edition 25
Posted 7-Oct-2017 23:16


Less fone, more tech as Vodafone gets brand make-over
Posted 6-Oct-2017 08:16


API Talent Achieves AWS MSP Partner Status
Posted 5-Oct-2017 21:20


Stellar Consulting Group now a Domo Partner
Posted 5-Oct-2017 21:03



Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.



Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.

Alternatively, you can receive a daily email with Geekzone updates.