Differences
This shows you the differences between two versions of the page.
| Both sides previous revision Previous revision Next revision | Previous revision | ||
| network:internet_multiwan [2024/12/05 13:38] – system | network:internet_multiwan [2024/12/06 03:40] (current) – [Anatomy of a multi-WAN profile] system | ||
|---|---|---|---|
| Line 12: | Line 12: | ||
| * Support for up to three radios that can be used for WAN over WiFi. | * Support for up to three radios that can be used for WAN over WiFi. | ||
| * Support for up to six LTE modems. | * Support for up to six LTE modems. | ||
| - | * You can use any combination of these connection types and customise them to suit your needs. | + | * You can use any combination of these connection types and customise them to your needs. |
| * We offer two modes: | * We offer two modes: | ||
| * Load balancing | * Load balancing | ||
| * Failover | * Failover | ||
| - | * In load balancing mode, the active and standby connections can in turn be grouped and weighted (to distribute | + | * In load balancing mode, the active and standby connections can in turn be grouped and weighted (to distribute traffic). |
| * Next, we will look at the Multi-WAN Profiles applet and finally see how easy it is to apply these profiles to devices. | * Next, we will look at the Multi-WAN Profiles applet and finally see how easy it is to apply these profiles to devices. | ||
| ----- | ----- | ||
| ====== Multi-WAN Profiles ====== | ====== Multi-WAN Profiles ====== | ||
| - | * The Multi-WAN Profiles applet is located under the **Other** | + | * The Multi-WAN Profiles applet is located under the **Other** selection. |
| <panel type=" | <panel type=" | ||
| {{{{: | {{{{: | ||
| Line 28: | Line 28: | ||
| ===== Anatomy of a multi-WAN profile ===== | ===== Anatomy of a multi-WAN profile ===== | ||
| * A functional multi-WAN profile consists of the following: | * A functional multi-WAN profile consists of the following: | ||
| - | * A name, which can be thought of as a folder | + | * A name, which can be thought of as a kind of folder, under which the interfaces are grouped. |
| - | * One or more interfaces used for WAN access. | + | * One or more interfaces |
| - | + | ||
| - | | + | ===== Gentle reminders ===== |
| + | | ||
| + | * The first reminds you that you need to add at least one interface. | ||
| <panel type=" | <panel type=" | ||
| - | {{:network:internet_wifi.png |}} | + | {{:network:multiwan: |
| - | </ | + | </ |
| - | * WiFi with static IP-Address support | + | * The second reminds you to apply a policy after you have added an interface to the Multi-WAN profile. |
| <panel type=" | <panel type=" | ||
| - | {{:network:internet_wifi-static.png |}} | + | {{:network:multiwan: |
| + | </ | ||
| + | * Each Multi-WAN profile has an associated policy. | ||
| + | * Here you define the mode of the multi-WAN profile and the weighting of the individual interfaces as well as the role in the event of failover mode. | ||
| + | <panel type=" | ||
| + | {{: | ||
| </ | </ | ||
| - | * WiFi with PPPoE support | + | * Once you have applied the policy, the multi-WAN profile is ready for use. |
| + | * Next, we will look at the settings that are triggered when an interface is marked as **down** or **up**. | ||
| + | |||
| + | ===== When to switch sides ===== | ||
| + | * For each interface you define, there is a separate area where you can specify the conditions under which the respective interface is considered unavailable / offline. | ||
| + | * Here are some things to keep in mind when customising some values. | ||
| + | * Active monitoring, where the hosts are pinged, is not mandatory | ||
| + | * If it is not enabled, the multi-WAN configuration will still monitor whether the interface itself is available or unavailable and act accordingly. | ||
| + | * Some of the more popular hosts used for ping testing may limit the number of responses or not respond at all. | ||
| + | * This can lead to a false trigger and also to the device being unreachable on the specific interface (e.g. for accessing the device via ssh or Luci). | ||
| + | |||
| <panel type=" | <panel type=" | ||
| - | {{:network:internet_wifi-pppoe.png |}} | + | {{:network:multiwan: |
| </ | </ | ||
| - | | + | |
| + | ------ | ||
| + | ====== Application of a multi-WAN profile ====== | ||
| + | ===== Applying a multi-WAN profile ===== | ||
| + | |||
| + | | ||
| + | * If you select the Multi-WAN option, a further selection field is displayed in which you can select which Multi-WAN profile you want to apply. | ||
| + | * Remember that the Multi-WAN profile and the hardware must be compatible. For example, you cannot use a Multi-WAN profile with an LTE interface | ||
| + | |||
| + | |||
| <panel type=" | <panel type=" | ||
| - | {{:network:internet_wifi-view.png |}} | + | {{:network:multiwan: |
| </ | </ | ||
| + | |||
| + | ===== Multi-WAN reporting ===== | ||
| + | * Multi-WAN Internet connections are visually recognisable in the overviews of the mesh nodes and APs. | ||
| + | < | ||
| + | {{: | ||
| + | </ | ||
| + | * In the following screenshot we have an access point with a multi-WAN profile in failover mode. | ||
| + | * The WAN interface is active. | ||
| + | * The traffic allocation is 100% | ||
| + | * Two LTE interfaces are in the standby role. | ||
| + | * They are actively monitored and are therefore marked in blue as being in standby mode. | ||
| + | * The WiFi interface is not actively monitored but the interface itself is up. | ||
| + | < | ||
| + | {{: | ||
| + | </ | ||
| + | * Next, we introduce a scenario that triggers a failover. | ||
| + | <code bash> | ||
| + | #We block ping packets from being sent on the host to which the access point is configured. | ||
| + | #This will trigger | ||
| + | sudo iptables -A INPUT -s 197.64.14.100 -p icmp --icmp-type echo-request -j DROP | ||
| + | #We remove the block | ||
| + | #This leads to a fallback. | ||
| + | sudo iptables -D INPUT -s 197.64.14.100 -p icmp --icmp-type echo-request -j DROP | ||
| + | |||
| + | </ | ||
| + | * Failover triggered | ||
| + | < | ||
| + | {{: | ||
| + | </ | ||
| + | * Ping block is removed and the active role connection is restored. | ||
| + | < | ||
| + | {{: | ||
| + | </ | ||
| + | |||