I work for a cooperative who is trying to deploy Balances throughout our system to increase bandwidth. We have started with two Balances, one at our headquarters (a 580) and one at one of our larger locations (380). We started testing the 580 and on Tuesday at night I plugged in our main ISP to the 580 on WAN1 set for Drop-in and connected LAN bypass (LAN3) to our Sonicwall NSA 2400 that handles private networking and VPN connections from the headquarters to the other offices through private networking. Once plugged in I was unable to get to the internet anymore and we were luckily able to flush the routing table on the ISP’s switch and get internet back (after I had put the main ISP back into the WAN port on the Sonicwall straight.
My best guess is that the Peplink may have sent a rerouting command immediately and took out our main IP address routing (possibly routing through the .64 address talked about belowinstead). From the graphic of how to do drop-in available on Peplink we got another IP address for the 580 to have on the same subnet. I set that up as the management IP through the LAN menu with Share Drop-in IP enabled set to our main IP address. Could I have done something here that did this? The way it was setup would be:
Main ISP: .52 address (WAN1)
Secondary ISP (different company): .218 (WAN2)
Peplink 580: .64 address for management (same subnet as Main ISP), added .52 address as Shared Drop-in IP address
Sonicwall NSA 2400: .52 external address (WAN), .1 internal address (Private address LAN)
Here it is in line form:
.52 ------> 580 (WAN1/Drop-in) -------> Sonicwall NSA 2400 (LAN3/Bypass into WAN port on Sonicwall)
.218 -----> 580 (WAN2) ---------------> Same as above
Ideally I’d like to use a Private IP address (.2 in the same subnet as the Sonicwall resides) for management of the Peplink, but am totally fine if it needs to be on an ISP provided IP address. This is our testbed and then I would go to the second location (all locations have a Sonicwall) and setup the same thing with different ISPs in the mix.
Thanks much for any help you can give as to how I could effectively set this up without something sending a rerouting command to a switch down the ISP’s line and the headquarters where everything runs through has no internet connection. Forgot to note the 580 does have 6.2.2 installed on it and I plan on doing upgrading to the 380 once I undertake that process. Just a little gun shy on it at the moment