How to configure DFL_210 Route Failover

1
How to configure DFL_210 Route Failover
2
Route Failover_DFL-210 Network topology
INTERNET
WAN1 10.253.11.0/24 WAN1 IP 10.253.11.202 WAN
GW 10.253.11.1
WAN2(DMZ) 192.168.0.0/24 WAN2 IP
192.168.0.99 WAN2 GW 192.168.0.1
DFL-210/800/1600/2500
LAN GW 192.168.1.1
Internal LAN IP 192.168.1.0/24
3
Log in the router
4
Addresses

• Go to Objects -gt Address book -gt Interface
• To add new objects, select IP address from the
  Add dropdown, enter name
• and address and click ok.

5
Add a new IP4 Group

• Go to Interface -gt Interface Groups
• Add a new Interface Group named all_wans,
  select wan_phy and wan2(DMZ) from the
  available interfaces and click ok.

6
Ethernet interfaces 1

• Go to Interface -gt Ethernet
• Edit the wan interface (wan1)and DMZ
  interface (wan2) and choose the right Default
  Gateway

7
Ethernet interfaces 2

• For both wan1 and wan2,
• in the Advanced tab,
• Automatic Route Creation,
• Deselect Add route for interface network and
  Add default route if default gateway is
  specified.

8
Routes 1

• Go to Routing -gt Routing Tables, Select main
  routing table and add a new Route. (This
  route is mainly for WAN1 interface routing with
  link status monitoring only)
• In the Monitor tab, select Monitoring This
  Route and Monitor Interface Link Status.
• Click ok

9
Routes 2

• Add a new route in the main routing
  table. (This route is mainly for WAN1
  default route with link status and ARP lookup
  monitoring)
• In the Monitor tab, select Monitoring This
  Route , Monitor Interface Link Status and
  Monitor Gateway Using ARP Lookup.
• Click ok and then the same setting with
  wan2(DMZ)

10
Routes 3

• Go to Routing -gt Routing Tables, add a new
  Routing Table named Failover
• And add Route in Failover
• Choose the right Gateway and change the
  Metric to 0
• In the Monitor tab, select Monitoring This
  Route and Monitor Interface Link Status.
  And then Click ok

11
Routes 4

• add Route wan2 in Failover
• Choose the right Gateway and change the
  Metric to 1
• In the Monitor tab, select Monitoring This
  Route and Monitor Interface Link Status.
• And then Click ok

12
IP Rules 1

• Go to Rules -gt IP Rules, add a new IP Rule
  Folder named lan_to_allwans
• Add IP Rule in lan_to_allwans
• In the General tab, select actionNAT and
  service all_services.
• Choose the right Source and Destination Interface
  and Networks.
• Click ok

13
IP Rules 2

• Add these IP Rules in lan_to_allwans
• Click ok

14
DNS Server

• Go to System -gt DNS, Select right server and
  click OK.

15
DHCP Server

• Go to System -gt DHCP -gt DHCP Servers
• Add a new DHCP Server, in the Options tab,
  choose the default gateway of the lannet and the
  DNS server.

16
Save and Activate !

• Go to Configuration -gt Save and Active!
• In this case, if wan1 fails, the traffic will be
  routed to wan2(DMZ) automatically.

17

• In this case, when wan1 fails, all traffic from
  LAN will be redirected to wan2(DMZ)
  automatically.
• When wan1 resumes, traffic from LAN will be only
  using wan1 again.
• For more details, please refer to the attached
  config file of this case.