Various routers of INSYS icom provide the option to set up a redundant WAN connection to increase the availability.

This Configuration Guide shows how to configure a redundant satellite connection.

Situation

An INSYS router has a primary WAN connection via mobile radio at a remote location. Occasional mobile network failures require a stable redundant WAN connection. In case of such a failure, the system shall switch to the satellite connection. When the mobile network is restored, it should be switched back to this.

Solution

It is prerequisite that you have access to the web interface of the router and the router has been commissioned for Internet access via LTE and a local LAN network at port 1.2 using the Startup Wizard. It is also assumed that the satellite router is connected to port 1.3 of the router. The Startup Wizard configures a LTE interface and a local LAN network for your router. You’ll now add an additional Internet connection (secondary WAN connection) and configure the connection check of the primary WAN connection. A WAN chain defines a WAN connection. It is the sequential arrangement of interfaces that defines the establishment of a WAN connection.

cg m3 sat fallback

  1. Open the user interface of the router in a browser: insys.icom [1]

  2. Click on pencil behind the IP network net3 on the lan Network → Interfaces page to edit this IP network.

    • Active: checkbox marked

    • Description: WAN

    • Mode: WAN - start only in WAN chain

    • Start DHCPv4 client: checkbox marked [2]
      cg en m3 sat fallback 01

  3. Click on   SUBMIT  .

  4. Click on plus on the lan Network → WAN / Internet page to add a new WAN chain and enter a Description.
    cg en m3 sat fallback 02

  5. Check the option Limit lifetime, enter a lifetime for this WAN chain and select under WAN chain upon expiry wan1 as WAN chain. [3].

  6. Click in the Interfaces in WAN chain section on plus and select above added IP network net3.

  7. Select the option Restart other WAN chain under Interface state offline

  8. Activate Additional connection check, select under Connection check type Ping, enter under Ping to e. g. www.insys-icom.com and enter a Connection check interval.

  9. Click on MORE chevron down and select the WAN chain wan1 under WAN chain on failure/offline.

  10. Click on   SUBMIT  .

  11. Click on pencil behind the WAN chain wan1 on the lan Network → WAN / Internet page to edit this.
    cg en m3 sat fallback 03

  12. Activate Additional connection check, select under Connection check type Ping, enter under Ping to e. g. www.insys-icom.com and enter a Connection check interval.

  13. Click on MORE chevron down under Interfaces in WAN chain, select the option Restart other WAN chain under Interface state offline and select the WAN chain wan2 under WAN chain on failure/offline.

  14. Click on   SUBMIT  .

  15. Click on the lan Network → Firewall / NAT page in the IP filter section on pencil behind the OUTPUT rule [Startup] DNS queries sent by the router - udp and add above added WAN interface under Output interface.
    cg en m3 sat fallback 04

  16. Click on   SUBMIT  .

  17. Add the WAN interface to the output interfaces in the same way for the filter rules [Startup] DNS queries sent by the router - tcp, [Startup] NTP queries sent by the router and [Startup] Traffic from local net into the WAN, for which the interface net3 is also specified as the output interface.
    cg en m3 sat fallback 05

  18. Click on the lan Network → Firewall / NAT page in the the Source NAT section on pencil behind the Masquerade rule [Startup] Masquerading for WAN interface and add above added WAN interface under Output interface.
    cg en m3 sat fallback 06

  19. Click on   SUBMIT  .

  20. Click on plus on the lan Network → Routing page in the Static routes section to add a new static route and enter a Description:
    cg en m3 sat fallback 07

  21. Select the WAN interface net3 specified above under Interface and Default route as Route type.

  22. Select dynamic - use received IP address under Gateway. [4].

  23. Click on   SUBMIT  .

  24. Click on the ethernet Ethernet → Ethernet page on pencil in the row of port Ethernet 1.3 to edit it and select net3 under Network .
    cg en m3 sat fallback 08

  25. Click on   SUBMIT  .

  26. Activate the profile with a click on   ACTIVATE PROFILE  cog white  .

Result testing

  1. Open the view dashboard outline Status → Dashboard page and observe the establishment of the WAN chain in the WAN chain section.

  2. Disconnect the antenna used for the cellular Internet connection and wait for the connection check interval to verify that the WAN connection changes to the redundant satellite WAN connection.

  3. Reconnect the antenna to verify that the WAN connection changes back to the normal cellular WAN connection after the lifetime of the redundant satellite WAN connection has expired.

Troubleshooting

  • You can temporarily disable the IP filters for IPv4 on the lan Network → Firewall / NAT page in the Settings IP filter section to find out if incorrect filter settings are the cause of problems.

  • Observe on the view dashboard outline Status → Log view page which process might fail.

  • Common careless mistakes when configuring such an application are forgetting to set the IP network to active or to add a default route.

Back to the Configuration Guides for icom OS routers

Back to overview

1. Standard IP address: 192.168.1.1; authentication depending on configuration; default for past firmware versions: User name: insys, Password: icom
2. If the satellite router does not have a DHCP server, enter a free IP address in the address range of the satellite router under Static IP addresses instead.
3. The WAN chain for the redundant satellite connection will be disconnected after the lifetime has expired and the WAN chain wan1 will be started, which is used to establish the connection to the normal LTE connection.
4. If the satellite router does not have a DHCP server, enter the IP address of the satellite router as Static IP address instead