Watchguard Firebox X20E, Руководство пользователя

Страница: 84 / 310

Using the WAN Failover Option
72 Firebox X Edge e-Series
- backmx=YES|NO& - Request that the MX in the previous parameter be set up as a backup MX
by listing the host itself as an MX with a lower preference value.
- wildcard=ON|OFF|NOCHG& - Enable/disable wildcards for this host (ON to enable).
- offline=YES|NO - Sets the hostname to offline mode.
One or more options can be chained together with the ampersand character like this:
&mx=backup.kunstlerandsons.com&backmx=YES&wildcard=ON
See this site for more information:
http://www.dyndns.com/developers/specs/syntax.html
7
Click Submit .
The Firebox X Edge does not operate with other Dynamic DNS services, only DynDNS.org.
Using the WAN Failover Option
The WAN Failover option supplies redundant support for the external interface. With this option, the
Firebox® X Edge e-Series starts a connection through the WAN2 port when the primary external inter-
face (WAN1) cannot send traffic. Companies use this option if they must have a constant Internet con-
nection. You must have a second Internet connection to use this option. You can have a second
broadband connection connected to the Edge to supply a failover Internet connection or you can use a
serial-based modem with a dial-up Internet connection.
The WAN Failover option is included in the X50 and X55 models. You can purchase an upgrade for
other models at the WatchGuard online store:
https://www.watchguard.com/store
It is not necessary to configure new policies to use this option. The failover interface uses the same pol-
icies and network properties as the external interface.
Understanding WAN Failover
The Firebox X Edge e-Series uses two procedures to see whether the external interface is functional:
•
The status of the link between the external interface and the device it is connected to (usually a
router)
•
A ping command to a specified location
The Firebox X Edge sends a ping to the default gateway or a computer specified by the administrator. If
there is no reply, the Edge changes to the secondary external network interface (WAN2).
When you enable the WAN Failover feature, the Firebox X Edge e-Series does this:
•
If the WAN1 interface connection stops, the Edge starts to use the WAN2 interface.
•
If the WAN2 interface connection stops, the Edge starts to use the WAN1 interface.
•
If the WAN1 interface and the WAN2 interface stop, the Edge tries the two interfaces until it
makes a connection.
When the WAN2 interface is in use, the Firebox X Edge monitors the primary (WAN1) interface. When
the WAN1 interface becomes available, the Edge automatically goes back to using the WAN1 interface.