This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

How can I setup multipath rules ?

Hello,

I have two WAN connections. Now I want to the service Port 51413 to use ONLY WAN2 and whole internal network LAN from WAN1. How Can I do this? I repeat when WAN 2 is down I don't want Port 51413 connect through WAN 1.

This thread was automatically locked due to age.

Parents

0 Vivek Jagad over 1 year ago

Hello Patrick ,

Thank you for reaching out to the community, please refer Uplink Balancing and Multipath rules.

Thanks & Regards,
_______________________________________________________________

Vivek Jagad | Team Lead, Technical Support, Global Customer Experience

Log a Support Case | Sophos Service Guide
Best Practices – Support Case | Security Advisories
Compare Sophos next-gen Firewall | Fortune Favors the prepared
Sophos Community | Product Documentation | Sophos Techvids | SMS
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel
0 Patrick over 1 year ago in reply to Vivek Jagad

I already read your post before asking here. I didn't solve my problem.
Cancel
Vote Up 0 Vote Down

Cancel
0 Vivek Jagad over 1 year ago in reply to Patrick

You have configured it correctly i.e.,, by binding it by interface, did you tried clearing the conntrack and then check whether the service uses WAN 2 and not WAN 1 ?

Thanks & Regards,
_______________________________________________________________

Vivek Jagad | Team Lead, Technical Support, Global Customer Experience

Log a Support Case | Sophos Service Guide
Best Practices – Support Case | Security Advisories
Compare Sophos next-gen Firewall | Fortune Favors the prepared
Sophos Community | Product Documentation | Sophos Techvids | SMS
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel
0 Patrick over 1 year ago in reply to Vivek Jagad

How do I clear the conntrack? So, I want when the WAN 2 is down the first rule Transmission (port 51413) does not connect to wan1.
Cancel
Vote Up 0 Vote Down

Cancel
0 Vivek Jagad over 1 year ago in reply to Patrick

refer Delete conntrack command.

Thanks & Regards,
_______________________________________________________________

Vivek Jagad | Team Lead, Technical Support, Global Customer Experience

Log a Support Case | Sophos Service Guide
Best Practices – Support Case | Security Advisories
Compare Sophos next-gen Firewall | Fortune Favors the prepared
Sophos Community | Product Documentation | Sophos Techvids | SMS
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 Vivek Jagad over 1 year ago in reply to Patrick

refer Delete conntrack command.

Thanks & Regards,
_______________________________________________________________

Vivek Jagad | Team Lead, Technical Support, Global Customer Experience

Log a Support Case | Sophos Service Guide
Best Practices – Support Case | Security Advisories
Compare Sophos next-gen Firewall | Fortune Favors the prepared
Sophos Community | Product Documentation | Sophos Techvids | SMS
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 Patrick over 1 year ago in reply to Vivek Jagad

I saw it. I don't undertand it. I type 192.168.10.4 is the host for my laptop and 192.168.10.1 is the gateway

conntrack -L --src 192.168.10.4 --dst 192.168.10.1 -p tcp

then I type

conntrack -D --src 192.168.10.4 --dst 192.168.10.1 -p tcp

then stuck this command in shell.

What I am doing wrong??
Cancel
Vote Up 0 Vote Down

Cancel
0 Vivek Jagad over 1 year ago in reply to Patrick

Hey Patrick to delete from source - #conntrack - D -s <ip.address> or (destination) #conntrack - D -d <ip.address>

Thanks & Regards,
_______________________________________________________________

Vivek Jagad | Team Lead, Technical Support, Global Customer Experience

Log a Support Case | Sophos Service Guide
Best Practices – Support Case | Security Advisories
Compare Sophos next-gen Firewall | Fortune Favors the prepared
Sophos Community | Product Documentation | Sophos Techvids | SMS
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel
0 Patrick over 1 year ago in reply to Vivek Jagad

I did it. I don't know if I deleted correct source but I deleted. The same error. I didn't solve it.
Cancel
Vote Up 0 Vote Down

Cancel
0 Vivek Jagad over 1 year ago in reply to Patrick

Please log a service request, will help expedite the service request.

Thanks & Regards,
_______________________________________________________________

Vivek Jagad | Team Lead, Technical Support, Global Customer Experience

Log a Support Case | Sophos Service Guide
Best Practices – Support Case | Security Advisories
Compare Sophos next-gen Firewall | Fortune Favors the prepared
Sophos Community | Product Documentation | Sophos Techvids | SMS
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel
0 Patrick over 1 year ago in reply to Vivek Jagad

I found the ip with conntrack --event ( real-time event log ) So , is there a way to setting up internal network using ONLY - SPECIFIC wan?

Can I do it with static routing?

Vivek I want 51413 to use only one wan. Can I do it?

Thank you
Cancel
Vote Up 0 Vote Down

Cancel
0 Vivek Jagad over 1 year ago in reply to Patrick

Hey Patrick ,
You can mention the internal network and the service under the multipath:

And Also under the Network Protection > NAT > Masquerading
Create a rule mentioning that internal network position top and select that specific WAN:

Thanks & Regards,
_______________________________________________________________

Vivek Jagad | Team Lead, Technical Support, Global Customer Experience

Log a Support Case | Sophos Service Guide
Best Practices – Support Case | Security Advisories
Compare Sophos next-gen Firewall | Fortune Favors the prepared
Sophos Community | Product Documentation | Sophos Techvids | SMS
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel