Author Topic: [SOLVED] WAN Failover service doesn't work  (Read 3341 times)

blah

  • Zen Apprentice
  • *
  • Posts: 13
  • Karma: +0/-0
    • View Profile
[SOLVED] WAN Failover service doesn't work
« on: December 17, 2010, 08:54:33 pm »
Hello all

I have got a problem with WAN Failover service in Zentyal.
I have 1 internal(LAN) and 2 external interface(WAN) setup for my Zentyal box.

LAN - eth0
WAN1 - eth1
WAN2 - eth2

I enabled both gateways for my WAN interfaces in the Networks-Gateways tab

WAN1 is default gateway.
WAN2 none.

I enabled the event WAN Failover in the module Events.
I added the proper failover rules for primary gateway (ping to host).

When i unplug cable for WAN1 Zentyal box switches my network traffic into the WAN2 interface (WAN2 becomes the primary interface).
After I plug back cable for WAN1 interface Zentyal box doesn't switch my network traffic into WAN1 and WAN2 still works as primary network interface.

Code: [Select]
ii  ebox                              2.0.9                             Zentyal - Core
ii  ebox-antivirus                    2.0.4                             Zentyal - Antivirus
ii  ebox-ca                           2.0.1                             Zentyal - Certification Authority
ii  ebox-firewall                     2.0                               Zentyal - Firewall
ii  ebox-ftp                          2.0                               Zentyal - FTP
ii  ebox-ids                          2.0.1                             Zentyal - Intrusion Detection System
ii  ebox-l7-protocols                 2.0                               Zentyal - Layer-7 Filter
ii  ebox-mail                         2.0.2                             Zentyal - Mail Service
ii  ebox-mailfilter                   2.0.2                             Zentyal - Mail Filter
ii  ebox-monitor                      2.0                               Zentyal - Monitor
ii  ebox-network                      2.0.6                             Zentyal - Network Configuration
ii  ebox-ntp                          2.0                               Zentyal - NTP Service
ii  ebox-objects                      2.0                               Zentyal - Network Objects
ii  ebox-openvpn                      2.0.4                             Zentyal - VPN Service
ii  ebox-remoteservices               2.0.6                             Zentyal - Zentyal Cloud Client
ii  ebox-services                     2.0                               Zentyal - Network Services
ii  ebox-software                     2.0.6                             Zentyal - Software Management
ii  ebox-squid                        2.0.2                             Zentyal - HTTP Proxy (Cache and Content Filter)
ii  ebox-trafficshaping               2.0.3                             Zentyal - Traffic Shaping
ii  ebox-usersandgroups               2.0.8                             Zentyal - Users and Groups

Is it bug? Or I haven't understood as works WAN Failover service in Zentyal's documentation?  

Sorry for my English and have a nice day!

« Last Edit: December 28, 2010, 01:31:01 pm by blah »

J. A. Calvo

  • Zentyal Staff
  • Zen Hero
  • *****
  • Posts: 1986
  • Karma: +67/-3
    • View Profile
    • http://blogs.zentyal.org/jacalvo
Re: WAN Failover service doesn't work
« Reply #1 on: December 17, 2010, 10:14:26 pm »
Do you have traffic balance enabled?
Zentyal Server Lead Developer

blah

  • Zen Apprentice
  • *
  • Posts: 13
  • Karma: +0/-0
    • View Profile
Re: WAN Failover service doesn't work
« Reply #2 on: December 17, 2010, 10:37:43 pm »
Hello, J. A. Calvo

No. I didn't enable this option.
I have read that this option is balance for traffic distribution.
I need just when the primary channel is inaccessible the secondary joined. It works.
When the primary interface becomes accessible, Zentyal switched to the primary interface back. It doesn't work.


Thank You for attention.


J. A. Calvo

  • Zentyal Staff
  • Zen Hero
  • *****
  • Posts: 1986
  • Karma: +67/-3
    • View Profile
    • http://blogs.zentyal.org/jacalvo
Re: WAN Failover service doesn't work
« Reply #3 on: December 18, 2010, 04:17:33 am »
So you want to disable the secondary gateway once the primary one goes back? I think that's not possible with the current implementation, the failover is thought for traffic balance: when you have more than one gateways, if one of them goes down it's disabled and the traffic keep balanced between the rest of them, once the downed gateway is up, it is enabled again.
Zentyal Server Lead Developer

blah

  • Zen Apprentice
  • *
  • Posts: 13
  • Karma: +0/-0
    • View Profile
Re: WAN Failover service doesn't work
« Reply #4 on: December 18, 2010, 09:29:04 am »
So you want to disable the secondary gateway once the primary one goes back?

Yes, I need only it.

Thanks for your answer and have a nice day.

blah

  • Zen Apprentice
  • *
  • Posts: 13
  • Karma: +0/-0
    • View Profile
Re: WAN Failover service doesn't work
« Reply #5 on: December 28, 2010, 01:30:20 pm »
I have solved the problem as follows:

On tab Balance Traffic I have created a rule for any network traffic through the primary network interface. The option Traffic balancing it is not enabled.
Now when the primary network interface is down network traffic starts to pass through secondary network interface. When the basic network interface is restored network traffic starts to pass through it again.

Best regards,
« Last Edit: December 28, 2010, 01:31:52 pm by blah »

n4than

  • Zen Apprentice
  • *
  • Posts: 16
  • Karma: +0/-0
    • View Profile
Re: [SOLVED] WAN Failover service doesn't work
« Reply #6 on: January 18, 2011, 04:13:02 pm »
I, did you solve your problem ?
I have the same problem with the wan failover service and ebox 1.4.
When the first gw goes down, it will never turn up.
These are my wan failover rules

Intervall : 60s
Ping to host : www.google.com
Success ratio : 20%

balance traffic is turn off but I have a rule from any to any for the first gateway.
Can someone helps me ?

blah

  • Zen Apprentice
  • *
  • Posts: 13
  • Karma: +0/-0
    • View Profile
Re: [SOLVED] WAN Failover service doesn't work
« Reply #7 on: May 06, 2011, 06:13:26 pm »
I have follow settings:
Gateways List tab
2 gateways on 2 WAN interfaces, one of it default gateway, Weight for both 1 and enabled.

Balance Traffic Tab
I have created a rule for any network traffic through the primary network interface.
Interface - Any,     Source - Any    Destination  - Any    Service  Any       
The option Traffic balancing it is not enabled.

WAN Failover Tab
Rules for ping  ISP gateway for primary interface.

Intervall : 60s
Ping to host : ISP gateway
Number of probes 5
Success ratio : 20%