This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Multipath rules for ISP failover

I have read many articles both here and elsewhere about this topic but I am not clear on the correct multipath rule(s) needed. I am looking for simple redundancy (actually "failover") from a primary fiber link to a secondary LTE link. We are using an SG 230 UTM.

• I have created the interface on E2 for the LTE modem and made it a default gateway with a static IP that is on the LTE modem's IP range.
• Both fiber & LTE links are active in uplink balancing with fiber being weighted 100, timeout = 15 min
• Masquerading is Internal -> Uplink Interfaces
• I currently have a multipath rule (by interface): any -> any -> any -> External

This is where there seems to be no clear explanation (that I can find) for the correct rule(s). Can someone clarify what I need?

Thanks

This thread was automatically locked due to age.

TomMorgan over 2 years ago

I found this by BAlfson from 7 years ago... I guess this is my answer.

"In active- passive, the failover takes more than a minute. I would suggest that you put both into 'Active interfaces' and enable the default gateway on the second interface. If you prefer to use the second interface purely as a backup, just make a single multipath rule:

Any -> Any -> Any : bind to first interface"
Cancel
Vote Up 0 Vote Down

Cancel
BAlfson over 2 years ago in reply to TomMorgan

Hi Tom,

You will also want to select 'Skip rule on interface error' in 'Advanced' in the Multipath rule. I think there was no option to not skip 7 years ago.

If you could link me back to that post, I would add that to it. TIA

Cheers - Bob

Sophos UTM Community Moderator
Sophos Certified Architect - UTM
Sophos Certified Engineer - XG
Gold Solution Partner since 2005

MediaSoft, Inc. USA
Cancel
Vote Up 0 Vote Down

Cancel
TomMorgan over 2 years ago in reply to BAlfson

Yep, I had found everything (including the Skip rule) except the correct multipath rule. I should be good now.

Here you go:

https://community.sophos.com/utm-firewall/f/network-protection-firewall-nat-qos-ips/41604/internet-failover
Cancel
Vote Up 0 Vote Down

Cancel