Important note about SSL VPN compatibility for 20.0 MR1 with EoL SFOS versions and UTM9 OS. Learn more in the release notes.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

(SG210 SFOS 20.0.0) What does weight signify with backup gateway?

Hey everyone, 

I'm just wondering what weight is meant to represent when it comes to a backup gateway? Is it a percentage thing? Meaning if the primary gateway goes down, the backup will handle 20% of traffic?



This thread was automatically locked due to age.
Parents
  • Essentially if you have an Backup interface, but it become active due the conditions, it will use the weight based of your settings. 

    __________________________________________________________________________________________________________________

  • So this interface is configured to be used as the backup gateway, but what do they mean by weight, and why is it from 1-100? 

  • A Backup Interface can become active, if the conditions below matches. If it is active, you can have a weight. 
    Weight is the system in Load balancing of WAN Interfaces (how many connections based of 1-100 should be there). 

    __________________________________________________________________________________________________________________

  • Ok, awesome, I think I'm understanding that. Our tech configured this one at a weight of 20, would you have any guesses why that nuymber would be chosen? If the primary interface is down and you have to fall to the backup, wouldn't you want 100 out of 100?

  • Essentially it only matters if there are more than 1 active interface. 

    It is a math calculation.

    So if you have 2 interfaces, both on 100, it means its 50/50 Split.

    If you have 20 and 100, it means, 10/50 Split. etc. 

    But if there is only one interface, you will stay at 100% all the time, as the firewall has nothing to load balance to. 

    __________________________________________________________________________________________________________________

Reply
  • Essentially it only matters if there are more than 1 active interface. 

    It is a math calculation.

    So if you have 2 interfaces, both on 100, it means its 50/50 Split.

    If you have 20 and 100, it means, 10/50 Split. etc. 

    But if there is only one interface, you will stay at 100% all the time, as the firewall has nothing to load balance to. 

    __________________________________________________________________________________________________________________

Children
  • Ahhh Ok, that makes sense, so in this case, because this is the backup gateway it won't really matter what the weight is because if it has to kick in that means the primary has gone down and it'll be 100% on the backup anyways. And it seems like weight is calculated more as a ratio rather than a percentage if I'm reading that right.