Tech or Treat! Write an article about your scariest tech disaster to win gadgets!Learn more

x
?
Solved

Failover & LB

Posted on 2013-10-31
8
Medium Priority
?
276 Views
Last Modified: 2013-12-13
Hi

I use a TZ215 with two ISP connection. I want to use them as round robin but I want that one of them be always the master because I have a fix IP on it.

What is the best setup to use?

Thanks
0
Comment
Question by:jpmoreau
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
8 Comments
 
LVL 26

Accepted Solution

by:
Blue Street Tech earned 2000 total points
ID: 39616093
Hi jpmoreau,

In order to do that just put the primary IP at the top...with Round Robin it works in priority status. So in your case traffic will flow will flip back and forth between your Primary and Secondary. Literally, if you refresh a web page the first time will be on the Primary and on the next refresh will be on the Secondary side. It sounds like you actually want to just have Basic Active/Passive Failover rather than Round Robin if you want the Primary to truly act as the Primary connection and the Secondary to act only if the Primary fails.

Here is a step-by-step on how to properly setup this: https://www.fuzeqna.com/sonicwallkb/ext/kbdetail.aspx?kbid=7828

Let me know if you have any questions!
0
 
LVL 2

Expert Comment

by:Jason Palmer
ID: 39616115
By TZ215, I assume you mean Sonicwall.

Your configuration does not really make any sense.  Sonicwall's, particularly the TZ series provide Fail-Over (Active-Passive) and not Active-Active configurations.

See the specification/overview page here:

http://www.sonicwall.com/us/en/products/TZ_215.html

If you have two TZ 215 units, then one unit is always primary and the other physical unit is always in Stand-by Mode.

Given that you have only one Static IP from one specific ISP, you have some choices depending on the speed differential between the two ISP connections and the types of services you are trying to configure.

For example, many of my customers have a static IP for their Mail Services on a T1 or Ethernet over Copper legacy or slower connection that has a real SLA (Service Level Agreement) then a significantly less expensive but much faster Cable/FiOS broadband connection with a Dynamic IP which is used for high speed web browsing and file transfer, or streaming video, music, etc.  In this case, we create Sonicwall Rules to Route all mail services over the Primary interface and all FTP/HTTP traffic over the secondary dynamic IP interface. We also configure a dynamic DNS service, such as dyndns.org , on the dynamic IP broadband connection and set a lower priority MX record to that CNAME.

Should the primary connection go down, mail will arrive via the dynamic DNS entry to the lower priority MX record.

If you are using the SSL-VPN or any type of VPN/dedicated services, just give users two different URL's to access:  i.e.  vpn.domain.com and vpn2.domain.com as the fall-back.

If you are trying to host a web site internally with two carriers having one static and one dynamic address, this is much harder to do because of the way that larger providers cache DNS entries.  So, unless you use a rock solid third party DNS provider like dyn.com or ultraDNS.com that use unicast, where DNS updates are virtually instantaneous, it could take hours or even a day for most ISP's and the likes of Verizon or Comcast or Cablevision to properly route the CNAME to the Fail-over A Record.

To be clear:  There are two parts to your solution depending on the services you are trying to keep "up" in the event of primary ISP failure.  If there are no internal services that are accessible from the outside, none of this matters.  Just configure the TZ 215 in straight fail-over mode for all services.    If there are internal services that need access from the outside, i.e. mail or web hosting, then it is critical that you create proper dynamic DNS host names and work with a DNS provider that can update entries globally quickly using some form of unicast technology.  Most regular ISP's just use BIND and this will leave you with a period of down time unless you have explicit control of the TTL (Time to Live) of your DNS Records.

Hope this helps,

Jason.
0
 

Author Comment

by:jpmoreau
ID: 39641988
Will check this in two weeks
0
Learn how to optimize MySQL for your business need

With the increasing importance of apps & networks in both business & personal interconnections, perfor. has become one of the key metrics of successful communication. This ebook is a hands-on business-case-driven guide to understanding MySQL query parameter tuning & database perf

 
LVL 26

Expert Comment

by:Blue Street Tech
ID: 39654174
Sounds good...keep me posted!
0
 
LVL 26

Expert Comment

by:Blue Street Tech
ID: 39678790
I'm glad I could help...thanks for the points!
0
 

Expert Comment

by:fluidequipment
ID: 39716979
"For example, many of my customers have a static IP for their Mail Services on a T1 or Ethernet over Copper legacy or slower connection that has a real SLA (Service Level Agreement) then a significantly less expensive but much faster Cable/FiOS broadband connection with a Dynamic IP which is used for high speed web browsing and file transfer, or streaming video, music, etc.  In this case, we create Sonicwall Rules to Route all mail services over the Primary interface and all FTP/HTTP traffic over the secondary dynamic IP interface."

This is exactly what I am looking to do on my TZ215 device. Would you be able to elaborate further on how to specifically and correctly create this static route for mail? Thanks!

Also, I am having trouble deciding on what failover/lb mode to use. I currently have it set to basic failover, but does this mean that my secondary WAN is on standby completely until the WAN1 fails? To the point that I cant even route traffic through it with static routes?
0
 
LVL 26

Expert Comment

by:Blue Street Tech
ID: 39717779
@fluidequipment - Sure go ahead and ask a new Question...and we'd love to take care of this for you!
0

Featured Post

Technology Partners: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

In the hope of saving someone else's sanity... About a year ago we bought a Cisco 1921 router with two ADSL/VDSL EHWIC cards to load balance local network traffic over the two broadband lines we have, but we couldn't get the routing to work consi…
Most of the applications these days are on Cloud. Cloud is ubiquitous with many service providers in the market. Since it has many benefits such as cost reduction, software updates, remote access, disaster recovery and much more.
Viewers will learn how to connect to a wireless network using the network security key. They will also learn how to access the IP address and DNS server for connections that must be done manually. After setting up a router, find the network security…
Michael from AdRem Software outlines event notifications and Automatic Corrective Actions in network monitoring. Automatic Corrective Actions are scripts, which can automatically run upon discovery of a certain undesirable condition in your network.…
Suggested Courses

647 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question