Configuring WAN Failover on Sangfor IAM Firewall

There are two main approaches to configure failover between two WAN links on a Sangfor IAM firewall:

1. Link Load Balancing with Failover:

This method uses Sangfor's built-in Link Load Balancing feature with failover capabilities. Here's a general outline of the steps involved:

    Enable Link State Detection:
        Go to Network Interface > WAN Link (choose your specific WAN interface).
        Click on Link State Detection Settings at the bottom.
        Enable Link State Detection and choose the appropriate method (e.g., PING) to monitor your WAN connection health.
        Set the Destination IP for each WAN link (usually the ISP gateway IP).

    Configure Link Load Balancing Policy:
        Go to Bandwidth Management > Link Load Balancing.
        Click Enable link load balancing policy. Confirm the prompt.
        Ensure the line state detection shows "Normal" for both WAN links.
        Under Default Link Load Balancing Policy, choose a pre-configured policy or create a new one.

    Configure Failover Policy (within Link Load Balancing Policy):
        When creating a new policy, you can define failover behavior.
        Specify conditions for failover (e.g., link down, packet loss exceeding a threshold).
        Choose the backup WAN link that takes over traffic when the primary link fails.

2. Policy-Based Routing with Failover:

This approach uses policy-based routing with failover rules. Here's a simplified overview:

    Define Network Objects:
        Go to Network Objects and create objects representing your WAN interfaces and internal network segments.

    Configure Routing Rules:
        Go to Route > Policy Route.
        Create routing rules that prioritize your primary WAN link for outgoing traffic.
        Include failover rules that divert traffic to the secondary WAN link if the primary link fails. You can base these rules on link status or other criteria.

Configuring WAN Failover on Sangfor IAM Firewall

There are two main approaches to configure failover between two WAN links on a Sangfor IAM firewall:

1. Link Load Balancing with Failover:

This method uses Sangfor's built-in Link Load Balancing feature with failover capabilities. Here's a general outline of the steps involved:

    Enable Link State Detection:
        Go to Network Interface > WAN Link (choose your specific WAN interface).
        Click on Link State Detection Settings at the bottom.
        Enable Link State Detection and choose the appropriate method (e.g., PING) to monitor your WAN connection health.
        Set the Destination IP for each WAN link (usually the ISP gateway IP).

    Configure Link Load Balancing Policy:
        Go to Bandwidth Management > Link Load Balancing.
        Click Enable link load balancing policy. Confirm the prompt.
        Ensure the line state detection shows "Normal" for both WAN links.
        Under Default Link Load Balancing Policy, choose a pre-configured policy or create a new one.

    Configure Failover Policy (within Link Load Balancing Policy):
        When creating a new policy, you can define failover behavior.
        Specify conditions for failover (e.g., link down, packet loss exceeding a threshold).
        Choose the backup WAN link that takes over traffic when the primary link fails.

2. Policy-Based Routing with Failover:

This approach uses policy-based routing with failover rules. Here's a simplified overview:

    Define Network Objects:
        Go to Network Objects and create objects representing your WAN interfaces and internal network segments.

    Configure Routing Rules:
        Go to Route > Policy Route.
        Create routing rules that prioritize your primary WAN link for outgoing traffic.
        Include failover rules that divert traffic to the secondary WAN link if the primary link fails. You can base these rules on link status or other criteria.