Kerio Tech Firewall6, Administrator'S Manual

Page: 49 / 404

49
Chapter 6
Internet Connection
The basic function of WinRoute is connection of the local network to the Internet via one or
more Internet connections (Internet links). Depending on number and types of Internet links,
WinRoute provides various options of Internet connection:
A Single Internet Link — Persistent
The most common connection of local networks to the Internet. In this case, only one
Internet connection is available and it is used persistently (typically Ethernet , WiFi , ADSL
or cable modems). It is also possible to use dial-like links which can be connected persis-
tently, such as
PPPoE
connections or
CDMA
modems.
A Single Internet Link — Dial On Demand
This type of connection is fit for links which are charged by connection time — typically
modems for analog or ISDN links. The link is down by default and WinRoute dials it in
response to a query demanding access from the local network to the Internet. If no data
are transferred via the link for some time, WinRoute hangs it up to reduce connection
costs.
Multiple Internet Links — Failover
Where reliability (availability of the Internet connection) is an issue and two Internet links
are available, the connection failover feature can help. If the primary link fails, WinRoute
switches to the secondary link automatically. Users may therefore notice just a very
short disconnection of the Internet connection. When the connection on the primary link
is recovered, WinRoute automatically switches back to it. For most part of users, this
operation takes so short to be even noticeable.
Multiple Internet Links — Traffic Load Balancing
If throughput (connection speed) is an issue, WinRoute can use multiple links concur-
rently and spread data transferred between the LAN and the Internet among these links.
In standard conditions and settings, this also works as connection failover — if any of
the links fails, transferred data are spread among the other (working) links.
In all cases, WinRoute works in the mode of shared Internet connection. Sharing uses the NAT
(IP address translation) technology, hiding the entire local network behind a public IP address
of the firewall (or multiple addresses — depending on the type of Internet connection applied).
WinRoute can also be used as a neutral router (router without NAT). However, this mode is not
the best connection of the LAN to the Internet — it requires expert configuration and advanced
security.