Dual WAN: system link-monitor vs. system virtual-wan-link for monitoring interface health

Forum|Forum|8 years ago
December 11, 2017
4 replies
11634 views

We have two Internet links and want to have health monitoring to failover from one to the other if there is an outage. What is the difference between these two functions in FOS 5.6?

[ul]

config system link-monitor

config system virtual-wan-link -> config health-check[/ul]

We are not using any of the SD-WAN features at present as we have some functionality on parts of the network that is not suitable to it (e.g., IP Pools, policy based routes). In this case which should we use?

Also, would using the SD-WAN health-check with no SD-WAN functionality otherwise enabled be likely to cause any odd behaviour?

5.6

veecheeAuthor

New Member

So decided on going this route. I will note that the CLI documentation for FOS 5.6 is not accurate on how to set the servers.

config system link-monitor edit "wan2" set srcintf "wan2" set server "4.2.2.6" "8.8.4.4" "9.9.9.10" set gateway-ip <gatewayIP> set timeout 2

set update-cascade-interface disable next edit "wan1" set srcintf "wan1" set server "4.2.2.6" "8.8.4.4" "9.9.9.10" set gateway-ip <gatewayIP> set timeout 2 set update-cascade-interface disable next end

sw2090

SuperUser

well I guess the link monitor will only monitor the health of your WAN but probably will not do any failover.

If you want failover use WLLB.

I do that like this:

- configure several WAN Interfaces

- create a virtual-wan-link over them with load balancing (i.e. WLLB)

- set some WLLB Conectivity check rules to monitor the WANs.

The Connectivty Checks will make the Loadbalancer know when there is an outtage. It then automtically does "failover" by just using the working WANs until the other one(s) will be back up again.

This works fine here...

ecsupport

New Member

Just an FYI having deployed both, it's not possible to do a primary/failover config with WLLB, as *both* must be active at least partially (can't do a weight of 0 for one link). For many of our branch sites, we'll have a coax primary and a DSL or T1 backup, which we don't want to use unless the primary goes down, so for that, we just do ECMP (equal cost multipath) with 2 static routes same distance but diff priority, and link-monitor to yank the primary if it goes down. Typically ping google quad8 & openDNS.

WLLB has some nicer features like jitter & latency based rules, as well as all the SD-WAN stuff, but again thats more for balancing load between circuits, rather than the scenario above.

Sign up

Login with SSO

Login to the community

Login with SSO