http://www.dslreports.com/forum/Re-USG100-dual-wan-problem-27871675 en Sat, 18 May 2013 12:59:27 EDT Sat, 18 May 2013 12:59:27 EDT http://www.dslreports.com/forum/Re-USG100-dual-wan-problem-27887897
kirby]]> http://www.dslreports.com/forum/Re-USG100-dual-wan-problem-27887897 Mon, 07 Jan 2013 10:34:34 EDT http://www.dslreports.com/forum/Re-USG100-dual-wan-problem-27887814
kirby]]> http://www.dslreports.com/forum/Re-USG100-dual-wan-problem-27887814 Mon, 07 Jan 2013 10:17:19 EDT http://www.dslreports.com/forum/Re-USG100-dual-wan-problem-27887394
I still can't test the firmware you sent me, I hope to test it during this week.

Anyway, I made some other test : I changed the dlink unit for another USG-100 with also 2 wans, so this time I created the VPN between 2 USG-100 both with wan HA. Wan1 form USG unit 1 is directly connected to wan1 of USG unit 2, and the same for wan2.

If I use the same subnet for all wan interfaces in both USG, for example 10.0.0.0/24, I have the same problem I had with Dlink unit. When I disconnect wan1 on one of USG unit, the vpn is not changed to WAN2.
But if I use 1 subnet (10.0.10.0/24) for wan1 on both usg , and 1 subnet (10.0.20.0/24) for wan2 on both usg, the VPN and WAN HA works ok !

So it seems that the problem is when I use the same subnet for both wans. Did you hear this issue before ?

Thanks again for your help
Regards]]> http://www.dslreports.com/forum/Re-USG100-dual-wan-problem-27887394 Mon, 07 Jan 2013 06:54:28 EDT http://www.dslreports.com/forum/Re-USG100-dual-wan-problem-27883060 There is DPD (dead peer detection) bug in IPSec in the current release. The date FW is fixing that. ... this may be whole or part of the issue you're experiencing.]]> http://www.dslreports.com/forum/Re-USG100-dual-wan-problem-27883060 Sat, 05 Jan 2013 11:59:39 EDT http://www.dslreports.com/forum/Re-USG100-dual-wan-problem-27882960
(I don't have any VPNs to test this myself.)

kirby]]> http://www.dslreports.com/forum/Re-USG100-dual-wan-problem-27882960 Sat, 05 Jan 2013 11:30:06 EDT http://www.dslreports.com/forum/USG100-dual-wan-problem-27871675
I want to implement a new USG-100 (firmware version 3.00(AQQ.2)) to work with 2 wan from different ISP. Before this implementation I created a test envirnoment to play with wan HA and VPN HA and confirm that all is working ok.

I created a ipsec VPN between USG-100 and a D-link DFL-200 router. D-link is configured with 2 remote gateways which belongs to USG-100.

USG-100 is using fixed ip address on both wan interfaces, both are using also connectivity check to know when the wan connectivity fails. Trunk interface is also configured with both wan interfaces. Wan1 is active and wan2 is passive using Round robin. Also a policy routing is configured to specify VPN ipsec traffic to use trunk intreface and then wan HA.

If i disable the wan interface from USG.100 web panel, the wan and VPN HA works ok, all traffic goes through wan2 after several seconds. The same if I disable wan2 -> all traffic goes to wan1 without problems.

My problem is when I manually disconnect the cable from wan1 port. Traffic is not changed to wan2, vpn is tring to create the ipsec tunnel from wan1 (and there is no cable on wan1 !). The same problem if the connectivity check from wan interfaces fails, the traffic is not changed from wan1 to wan2....

then, It only works ok if I disconnect wans interfaces from web pannel ... Any Idea ?

Thanks in advance for your help
Regards
Pere]]> http://www.dslreports.com/forum/USG100-dual-wan-problem-27871675 Tue, 01 Jan 2013 16:44:54 EDT