Setting Up Auto-Rollover Mode
If you want to use a redundant ISP link for backup purposes, ensure that the backup WAN port has
already been configured. Then you select the WAN port that will act as the primary link for this
mode and configure the WAN Failure Detection Method to support Auto-Rollover.
When the VPN firewall is configured in Auto-Rollover mode, the VPN firewall uses the WAN
Failure Detection Method to check the connection of the primary link at regular intervals to
detect its status. Link failure is detected in one of the following ways:
•
By using DNS queries to a DNS server, or
•
By a Ping to an IP address.
For each WAN interface, DNS queries or Ping requests are sent to the specified IP address. If
replies are not received, the corresponding WAN interface is considered down.
To configure the dual WAN ports for Auto-Rollover
1. Select Network Configuration from the primary menu and WAN Mode from the secondary
menu. The WAN Mode screen will display.
2. In the Port Mode section, check the Auto-Rollover Using WAN port radio box.
3. Selection the WAN port that will act as the primary link for this mode from the pull-down
menu.
4. From the WAN Failure detection Method section, select the detection failure method radio
box from one of the following choices:
•
DNS lookup using configured DNS Servers (ISP DNS Servers). In this case, DNS
queries are sent to the DNS server configured on the WAN ISP screens (see
the Internet Connections to Your ISPs" on page
•
DNS lookup using this DNS Server (for example, a public DNS Server). Enter any
public DNS server. DNS queries are sent to this server through the WAN interface being
monitored.
•
Ping to this IP address. Enter a public IP address that will not reject the ping request or
will not consider the traffic abuse. Queries are sent to this server through the WAN
interface being monitored.
Connecting the VPN Firewall to the Internet
ProSafe VPN Firewall 200 FVX538 Reference Manual
2-2).
v1.0, January 2010
"Configuring
2-9