Multiple Wan Configuration Options; Wan Failover; Multi-Wan - Watchguard Firebox X15 User Manual

About using multiple external interfaces
With the Firebox, you can have redundant support for the external interface. Companies use this option if they
must have a constant Internet connection.
If you have an Edge Pro license for your Firebox X Edge and have a second Internet connection, you can
configure a second external interface on the Edge. If you have a second broadband connection, you can
choose to configure the Edge in a WAN failover configuration or a round-robin load balancing configuration.
If your second Internet connection is a serial-based modem with a dial-up Internet connection, you must use
a WAN failover configuration.
To purchase an Edge Pro upgrade for your Firebox X Edge, contact your reseller or go to theWatchGuard
online store: https://www.watchguard.com/store.
It is not necessary to configure new policies when you use a second external interface. The second interface
uses the same policies and network properties as the primary external interface.

Multiple WAN configuration options

If you have Edge Pro appliance software for your Firebox X Edge e-Series, you can configure a second external
interface for your Edge. You can choose from two configuration options to control how the Edge routes traffic
through the second external interface.

WAN Failover

When you configure the Edge for WAN failover, the Edge sends all traffic through the primary external
interface. If the primary interface is not active, the Edge sends all traffic through the secondary external
interface. The Firebox X Edge e-Series uses two procedures to see whether the external interface is functional:
The status of the link between the external interface and the device it is connected to (usually a router)
A ping command to a specified location
The Firebox X Edge sends a ping to the default gateway or a computer specified by the administrator. If there
is no reply, the Edge changes to the secondary external network interface (WAN2).
When you enable the WAN Failover feature, the Firebox X Edge e-Series does this:
If the WAN1 interface connection stops, the Edge starts to use the WAN2 interface.
If the WAN2 interface connection stops, the Edge starts to use the WAN1 interface.
If the WAN1 interface and the WAN2 interface stop, the Edge tries the two interfaces until it makes a
connection.
When the WAN2 interface is in use, the Firebox X Edge monitors the primary (WAN1) interface. When the
WAN1 interface becomes available, the Edge automatically goes back to using the WAN1 interface.

Multi-WAN

When you configure the Edge to use multi-WAN in round-robin load balancing, the Edge looks at its internal
routing table to check for a specific route for each connection. If no specified route is found, the Edge
distributes the traffic load between its two external interfaces. If you select Weighted Round Robin load
balancing, you can use the slider to set the percentage of traffic you want to go through each interface.
When you configure the Edge for multi-WAN round robin load balancing, the Edge continues to monitor the
status of each interface. If an interface goes down, the Edge sends all traffic through the other interface.
User Guide
Network Settings
93