Hi, how to make it work on two peplink 580 running in two building? fiber connection with switch?
Hi. Not sure exactly what architecture you anticipate but this is essentially a “Layer 1 problem.” Fiber is great if you can do it! 
1 Like
Hello @tks_540,
Have you asked your local Certified Peplink Partner to help you with this?
There are a few questions based on the schematic supplied:
- Are you attempting to backup the ISPs to each location?
- Do you need the Office Network traffic at each site to traverse to each location?
- Can you expand more on what the “Router” is between the ISPs and the Aruba 2530s, such as is it an ISP supplied modem
- Is the ISP connections NATed
- Are you getting two Public IPs from each of the ISPs
Would you consider simplifying your network and using the features within the Balance 580 to replace the Aruba 2530 and the Firewalls?
One simplification you could do is as follows. It requires setting up VLANs & trunks, it also allows for some redundancy between sites and the sharing of the ISPs (not HA though).
Before wiring up the cabling below, setup these initial VLANs & Trunks & Access Ports.
For Building #1 Balance, edit the Ports as follows
- Create VLAN 10 with InterVLAN routing OFF & with DHCP set to ON (unless you want to assign static IPs to everything)
- Create VLAN 20 with InterVLAN routing OFF & with DHCP set to OFF
- LAN#1 Access - Untagged
- LAN#2 Access - VLAN 20
- LAN#3 Trunk
For Building #2 Balance, edit the Ports as follows
- Create VLAN 10 with InterVLAN routing OFF & with DHCP set to OFF
- Create VLAN 20 with InterVLAN routing OFF & with DHCP set to ON (unless you want to assign static IPs to everything)
- LAN#1 Access - Untagged
- LAN#2 Access - VLAN 10
- LAN#3 Trunk
Then wire up the two Balance 580s as follows
Remove the ISP routers (if not a modem) and also the Aruba switches
- ISP #1 to WAN#1 of Peplink Balance Buidling#1
- ISP #2 to WAN#1 of Peplink Balance Building#2
Remove the Firewall (the Peplink Balance 580 has an excellent firewall built-in)
- Building #1 LAN#1 to Office Network
- Building #2 LAN#1 to Office Network
Connect the Fibre Links directly to the Peplink (this suggestion is so you can use WAN Bypass mode)
- Fibre Link at Building #1 to LAN#3 of Peplink Balance Buidling#1
- Fibre Link at Building #2 to LAN#3 of Peplink Balance Buidling#2
This next part utilises each of the Balance 580s to supply the other with the others ISPs
- On the Peplink Building #1 connect the WAN#2 to the LAN#2
- On the Peplink Building #2 connect the WAN#2 to the LAN#2
If you want to have multiple VLANs for your offices at each building, then use a Managed switch (such as a Peplink SD Switch) on the LAN#1 connection and change it from Access Untagged to Trunk.
Once this is set up, you can then look at creating SpeedFusion Tunnels to managed connections between the two buildings and also to handle the possibility of connection faults to optimise the system uptime.
As you are an experienced network engineer (based on your schematic), you should have enough information here to get started and hopefully make this work.
We recommended that to engaging a Certified Peplink Engineer to help you with this. Your Local Certified Peplink Partner can help or put you in touch with one. Please understand that engaging with a Certified Peplink Engineer is likely to have a cost associated with their expertise, especially if they are not your direct supplier.
https://www.peplink.com/peplink-certified-partners/
Happy to Help,
Marcus 
Hi Marcus,
Actually this was done by Certified Peplink partner in one premises and working. Now, we plans to move one peplink device to another building for company structure expansions. So, I thinking use SFP fiber port as connection instead.
- Are you attempting to backup the ISPs to each location?
Yes. - Do you need the Office Network traffic at each site to traverse to each location?
No. - Is the ISP connections NATed
Yes. - Are you getting two Public IPs from each of the ISPs
Yes.
Hello Teo (@tks_540),
Thanks for sharing that second schematic, we are getting a better understanding of your current situation.
Do you know if your Peplink Certified Engineer has set you up with your two Balance 580s in HA mode or are they running two separate office networks? Are you able to confirm this?
Based on the second schematic you have already two separate office networks (are not running in HA mode) so picking up the “Office Network 2” system and moving it all to a new location will not require any changes on the LAN side. On the WAN side, you will need to make changes as per your first schematic. You may also need to reprogram your WAN ports based on what details you ISP gives you and the way you structure your two switches and the interbuilding link.
Peplink Partners are as unique as are Peplink deployments, so we will all have varying ideas and experience on making this work for you. Are you in a position to re-engage with your previous Peplink Engineer or do you need help more urgently (such as you need this done before everyone returns to work in the new year)? Let the forum know what country you are in and your local Peplink Partner may see this post and reach out directly to you.
FYI I am based in Australia (click on my profile for more info). You can PM (private message) any member of the forum if you wish to engage privately though please reach out to your local team first. Being New Year’s Eve most partners are on reduced availability and we understand it may be difficult to reach people.
Happy to Help,
Marcus
Hi Marcus,
Thanks for your advice. We located in Singapore and why I posted here was because we’re wanna try to do it by ourselves. Anyway we will work through with our peplink partners first.
Thanks Bro.
Hello Teo @tks_540,
You may be able to run your two sites with each of the Balance 580s also running in HA Mode, you can do this by using a managed switch with VLANs, it could work quite well for you giving ISP pathway backup, and router backup, your main point of failure will be the managed switch at each end.
We all are open to encourage you to have a go at it, by having a go at it you will discover and certainly help yourself with future support as you will better understand your systems.
Happy to Help,
Marcus
1 Like
TKS, I’m not understanding the reason for using two Balance 580 instead of just one, unless you want to use high availability mode as Marcus describes. I would put both Office Network LANs behind a single 580. That would allow the single 580 to do its intended job as load balancing between the two ISP. Putting the second 580 in HA mode effectively means it is dormant until needed, but provides redundancy.
The fiber between the two buildings would then become part of one of the office network LANs.
Does your internet bandwidth and use exceed the capability of a single 580?
3 Likes