VoIP Traffic Through Secondary WAN Port

Hi All.

Firstly, thank you for your time to help!

Let me give you a quick breakdown of my network and then I will explain what I am trying to do.

I have a XGS 2100 running on v20 SFOS. I have 2 ISP connections, a primary and a backup. (I have set them like this in WAN-Link Manager.)

I then have a DHCP LAN going to my internal network, which has a couple of VoIP base stations that our VoIP phones connect to.

What I am trying to do is direct the VoIP traffic through the "backup" ISP connection and have the rest of my internet traffic flowing through the "primary" ISP connection.

This is my first time using a Sophos Firewall and I have tried everything I can think of, but to no avail!

I thank you again for your help to help me solve this!

Kindest Regards.

Daniel.

Added TAGs
[edited by: Erick Jan at 9:45 AM (GMT -7) on 12 Sep 2024]

0 Erick Jan 5 days ago

Hi Daniel,

Thank you for reaching out to Sophos Community.

Kindly check the following Recommended read which might assist you

Sophos Firewall: How to Choose The Gateway For A Firewall Rule v19

Erick Jan
Community Support Engineer | Sophos Technical Support
Sophos Support Videos | Product Documentation | @SophosSupport | Sign up for SMS Alerts
If a post solves your question use the 'Verify Answer' link.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Reject Answer

Cancel
0 daniel_schmidt 5 days ago in reply to Erick Jan

Hi Erick.

Thank you for your time.
I have tried this but it still pushing the VoIP traffic through the primary ISP Port.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 rfcat_vk 5 days ago in reply to daniel_schmidt

Hi,

what have you tried from the link that Erick provided? Linked NAT or SD_WAN?

Ian

XG115W - v20.0.2 MR-2 - Home

XG on VM 8 - v20.0.2 MR-2

If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 daniel_schmidt 5 days ago in reply to rfcat_vk

Hi Ian.

I tried the SD-WAN Route.

I already had a general LAN to WAN, so I created another rule which I called VoIP to WAN 2.

I then added the SD-WAN Route VoIP to iUncapped.

And a SD-WAN Route LAN to WAN.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 Erick Jan 5 days ago in reply to daniel_schmidt

Hi Daniel,

Can you try using the Link selection setting "Select SD-WAN Profile" and applying it to the correct SD-WAN Profile?

For reference please see the KB above.

Erick Jan
Community Support Engineer | Sophos Technical Support
Sophos Support Videos | Product Documentation | @SophosSupport | Sign up for SMS Alerts
If a post solves your question use the 'Verify Answer' link.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 daniel_schmidt 5 days ago in reply to Erick Jan

Please correct me if I am wrong, but the SD-WAN Profile controls which ISP to use based on certain metrics like latency and jitter?
If this is the case, I'd prefer to have a fix "Primary" and "Backup" through the WAN Link Manager with a failover.

The reason for this preference is the connections aren't very stable (the site is rural) and I don't want the SD-WAN Profile switching WAN ports every time there is a latency spike.

What I can't seem to understand is why doesn't a simple rule and NAT telling the firewall that all traffic coming from and going to these local IP addresses must go through the selected WAN port. Regardless of what the traffic is.

Again, please correct me if I am wrong and thanks for all the help!
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel