High Availability Configuration Example with Multi-WAN

Configuration guides, troubleshooting and practical advice for AZTCOFW.

Articles

4 results

Determine IP Address Assignments

For this example, four IP addresses will be used on each WAN. Each firewall needs an IP address, plus one CARP VIP for Outbound NAT, plus an additional CARP VIP for a 1:1 NAT entry that will be used for an internal mail

Firewall Configuration

With Multi-WAN a firewall rule must be in place to pass traffic to local networks using the default gateway. Otherwise, when traffic attempts to reach the CARP address or from LAN to DMZ it will instead go out a WAN conn

Multi-WAN HA with DMZ Diagram

Due to the additional WAN and DMZ elements,a diagram of this layout is much more complex. Fig. 9: Diagram of Multi-WAN HA with DMZ

NAT Configuration

The NAT configuration when using HA with Multi-WAN is the same as HA with a single WAN. Ensure that only CARP VIPs are used for inbound traffic or routing.