troubleshooting Question

Static Route for "preferred gateway" with failover to "default gateway" for ONE subnet ONLY

Avatar of Hayzeus
Hayzeus asked on
NetworkingDHCPNetwork Architecture
7 Comments1 Solution7224 ViewsLast Modified:
I am having trouble working through this situation.  I have four branches connected via full mesh WAN links.  ONE of the four branchs is a 56k connection, while the other three are all High Speed connections.  We have set up a secondary high speed WAN link (using a wireless connection) to the slow linked branch that will ONLY provide access between the Head Office and the "slow" branch office.  For this slow branch, the Primary Gateway will still remain the slow link for remote workstations accessing everything except Win2k Server Access (ie..Internet still goes out over slow link).  I want the workstations to fail over to the slow speed link for Win2k Server access if the high speed link goes down (fails to respond to PING) because there IS a route to head office through the slow link (and vice versa for Head Office to Slow Office).

Branch Office Subnet:  192.168.2.0
Default Gateway (slow full mesh):  192.168.2.254
Second Gateway (fast main office link only):  192.168.2.1

Head Office Subnet:  192.168.1.0
Default Gateway (fast full mesh):  192.168.1.254
Second Gateway (single branch direct link only):  192.168.1.1

In the Main Office, I want the servers to communicate to the Branch Office via the fast link, BUT if the fast link goes down I want the servers to auto-switch to the slow link.  I also want the workstations in the Branch office to do the same thing.

What I know:
I did my testing from a workstation in HEAD Office.  The metric on the default gateway is set to 2.
I have added a static route to the 192.168.2.x network with this command
route add 192.168.2.0 mask 255.255.255.0 192.168.1.1 metric 1 -p
Therefore, the head office workstation would communicate to slow branch on metric 1 static route, but on Failure it should have tried the Default Gateway.

PROBLEM:
When I ping a workstation at the remote branch, it goes through the static route that I have set up to the Fast Gateway.  To test the "failover" I shut down the power to the fast gateway device.  I expected the pings to time out for a short period of time and then the workstation would start using the Default Gateway at metric 2.  This never happened, and I do not know why.  

To test further, I added a second static route with a metric 2 pointing to the default gateway.  When I did a ROUTE PRINT, the following lines appeared as I expected they would at the bottom of the output:

Default Gateway:    192.168.1.254
============================================================
Persistent Routes:
  Network Address          Netmask  Gateway Address  Metric
     192.168.2.0    255.255.255.0    192.168.1.1       1
     192.168.2.0    255.255.255.0   192.168.1.254       2

I cannot set two DEFAULT gateways in Network Properties because the 2nd gateway is ONLY valid to reach the slow remote branch (vice-versa for the remote branch access to Head Office).  The Primary Link gateways need to stay valid at all times.

QUESTION:
Does anyone have any ideas why my workstation is not automatically using the 2nd gateway when it fails to get through the "dead" gateway?

All Hail The Ascii Map

Remote Branch...................Remote Branch
...............|.........\.........................../
...............|..........\......................../
...............|.........56k...............FAST
...............|..............\................./
...............|...............\======/
.............FAST...........|.............|
...............|...........Private Network
...............|...............|.............|
...............|...............|======|
...............|............../...............\
...............|............./..................\
...............|........FAST...............FAST
...............|........../.......................\
........Head Office................Remote Branch
Join the community to see this answer!
Join our exclusive community to see this answer & millions of others.
Unlock 1 Answer and 7 Comments.
Join the Community
Learn from the best

Network and collaborate with thousands of CTOs, CISOs, and IT Pros rooting for you and your success.

Andrew Hancock - VMware vExpert
See if this solution works for you by signing up for a 7 day free trial.
Unlock 1 Answer and 7 Comments.
Try for 7 days

”The time we save is the biggest benefit of E-E to our team. What could take multiple guys 2 hours or more each to find is accessed in around 15 minutes on Experts Exchange.

-Mike Kapnisakis, Warner Bros