Watchguard Firebox X15, Руководство пользователя

Страница: 97 / 266

Enabling the WAN Failover Option
User Guide 83
Enabling the WAN Failover Option
The WAN Failover option supplies redundant support for the exter-
nal interface. With this option, the Firebox® X Edge starts a connec-
tion through the WAN2 port when the primary external interface
(WAN1) cannot send traffic. Companies use this option if they must
have a constant Internet connection. You must have a second Inter-
net connection to use this option. You can have a second broadband
connection, or use an external modem connected to the Edge to
supply a failover Internet connection.
It is not necessary to configure new services to use this option. The
failover interface uses the same services and network properties as
the external interface.
The Firebox uses two procedures to see if the external interface is
functional:
• The status of the link between the external interface and the
device it is connected to (usually a router)
• A ping command to a specified location
The Firebox sends a ping to the default gateway or a computer
specified by the administrator. If there is no reply, the Firebox
changes to the secondary external network interface (WAN2).
When you enable the WAN Failover feature, the Firebox does the
following:
• If the WAN1 interface connection stops, the Firebox starts to
use the WAN2 interface.
• If the WAN2 interface connection stops, the Firebox starts to
use the WAN1 interface.
• If the WAN1 interface and the WAN2 interface stop, the Firebox
tries the two interfaces until it makes a connection.
When the WAN2 interface is in use, the Edge will monitor the pri-
mary (WAN1) interface. When the WAN1 interface becomes avail-
able, the Edge will automatically go back to using the WAN1
interface.
To configure the WAN failover network:
1 Connect one end of a straight-through Ethernet cable to the
WAN2 interface. Connect the other end to the source of the