Kerio Tech KERIO WINROUTE FIREWALL 6, Administrator'S Manual

Page: 62 / 368

Chapter 6 Internet Connection
62
Warning
WinRoute is running in the operating system as a service. Therefore, external applica-
tions and operating system’s commands will run in the background only (in the SYSTEM
account). The same rules are applied for all external commands and external programs
called by scripts. Therefore, it is not highly unrecommended to use interactive applica-
tions (i.e. applications with user interaction) for the actions described above. Otherwise.
interactive applications are running as “invisible” until the next reboot or until the partic-
ular process is ended by the Windows Task Manager . Under specific circumstances, such
application might also block other dials or hang-ups.
6.3 Connection Failover
WinRoute allows guarantee Internet connection by an alternative (back-up) connection (so
called connection failover). This connection failover is launched automatically whenever fail-
ure of the primary connection is detected. When WinRoute finds out that the primary con-
nection is recovered again, the secondary connection is disabled and the primary one is re-
established automatically.
Requirements
The computer hosting WinRoute must have two network interfaces for Internet connection:
a leased line ( Ethernet , WiFi ) or a dial-up with persistent connection ( CDMA , PPPoE ) for primary
connection and a leased line or a dial-up for secondary (failover) connection.
This connection type also requires one or more network cards for connection of individual
segments of the LAN. Default gateway must NOT be set on any of these cards (cards for the
LAN)!
In case of dial-ups, it is also necessary to define corresponding telephone connection in the
operating system. It is not necessary that login data for telephone connections are saved in
the system, this information can be specified directly in WinRoute .
Both the primary and the secondary link may be configured automatically by the DHCP proto-
col. In that case, WinRoute looks all required parameters up in the operating system.
It is recommended to check functionality of both the primary and the secondary link out
before installing WinRoute :
•
If these links are two dial-ups, dial one after the other and check the Internet connec-
tion.
• If the primary link is leased and the secondary a dial-up, test the primary link con-
nection first and the secondary connection second. Dialing of the link opens (creates)
a new default route via this link which allows us to test Internet connection on the
secondary link.
•
In case of two leased links, the simplest way is to disable one of the connections in
the operating system and test the other (enabled) link. And, as implied, test the other
in the same way when the first link is checked.