Configuration Wizards
Using the Dual WAN Wizard to Configure WAN Redundancy Settings
Cisco ISA500 Series Integrated Security Appliances Administration Guide 53
2
-Weighted by Link Bandwidth: If you choose this option, specify the
amount of bandwidth for each WAN, such as 80 Mbps for WAN1 and 20
Mbps for WAN2, which indicates that 80% bandwidth is distributed to
WAN1 and at least 20% bandwidth is distributed to WAN2.
NOTE: The Weighted by Link Bandwidth option has the same effect with the
Weighted by Percentage option. It just provides more percentage options
than Weighted by Percentage that only provides three percentage options.
•Failover: Choose this option if you want to use one ISP link as a backup. The
Failover mode directs all Internet traffic to the secondary link if the primary
link is down. When the primary link regains connectivity, all Internet traffic is
directed to the primary link and the secondary link becomes idle.
-Select WAN Precedence: Choose one of the following options:
Primary: WAN1; Secondary: WAN2: If you choose this option, WAN1 is
set as the primary link and WAN2 is set as the backup link.
Primary: WAN2; Secondary: WAN1: If you choose this option, WAN2 is
set as the primary link and WAN1 is set as the backup link.
-Preempt Delay Timer: Enter the time in seconds that the security
appliance will preempt the primary link from the backup link after the
primary link is up again. The default is 5 seconds.
STEP 10 After you are finished, click Next.
Configuring Network Failure Detection
STEP 11 Use the Network Detection page to configure network failure detection.
•Retry Count: Enter the number of retries. The security appliance repeatedly
tries to con nect to the ISP after the netwo rk failure is dete cted.
•Retry Timeout: Enter the interval value between two detection packets
(Ping or DNS detection).
•Ping Detection-Ping using WAN Default Gateway: If you choose this
option, ping the IP address of the default WAN gateway. If the default WAN
gateway can be detected, the network connection is active.
•DNS Detection-DNS lookup using WAN DNS Servers: If you choose this
option, the security appliance sends the DNS query for www.cisco.com to
the default WAN DNS server. If the DNS server can be detected, the network
connection is active.