Important note about SSL VPN compatibility for 20.0 MR1 with EoL SFOS versions and UTM9 OS. Learn more in the release notes.

Thread Info
  • State Suggested Answer
  • Replies 6 replies
  • Answers 1 answer
  • Subscribers 40 subscribers
  • Views 371 views
  • Users 0 members are here
Options
Suggested

VoIP Traffic Through Secondary WAN Port

daniel_schmidt

Hi All.

Firstly, thank you for your time to help!

Let me give you a quick breakdown of my network and then I will explain what I am trying to do.

I have a XGS 2100 running on v20 SFOS. I have 2 ISP connections, a primary and a backup. (I have set them like this in WAN-Link Manager.)

I then have a DHCP LAN going to my internal network, which has a couple of VoIP base stations that our VoIP phones connect to.

What I am trying to do is direct the VoIP traffic through the "backup" ISP connection and have the rest of my internet traffic flowing through the "primary" ISP connection.

This is my first time using a Sophos Firewall and I have tried everything I can think of, but to no avail!

I thank you again for your help to help me solve this!

Kindest Regards.

Daniel.



Added TAGs
[edited by: Erick Jan at 9:45 AM (GMT -7) on 12 Sep 2024]
Parents Reply
  • 0 in reply to Erick Jan

    Please correct me if I am wrong, but the SD-WAN Profile controls which ISP to use based on certain metrics like latency and jitter?
    If this is the case, I'd prefer to have a fix "Primary" and "Backup" through the WAN Link Manager with a failover.

    The reason for this preference is the connections aren't very stable (the site is rural) and I don't want the SD-WAN Profile switching WAN ports every time there is a latency spike.

    What I can't seem to understand is why doesn't a simple rule and NAT telling the firewall that all traffic coming from and going to these local IP addresses must go through the selected WAN port. Regardless of what the traffic is.

    Again, please correct me if I am wrong and thanks for all the help!

Children
No Data
Unfiltered HTML