USG6305 instruction for 4G/LTE Modem Internet Failover

Created: Jun 25, 2019 20:34:53Latest reply: Jun 29, 2019 21:44:56 246 9 1 0
  Rewarded Hi-coins: 0 (problem resolved)

Hi,


Is there any instruction how to setup the (Huawei E3372) LTE USB Stick for Internet failover at the USG?


My Config doesnt works perfekt. Only on new sesions, when Internet on Interface GigabitEthernet0/0/1 goes down. DNS didn't work.


Thanks


====latest Config====

...

#

healthcheck enable
healthcheck name UPC-Health
destination 8.8.8.8 interface GigabitEthernet0/0/1 protocol icmp
healthcheck name Ping-LTE
destination 8.8.8.8 interface Cellular0/0/0 protocol icmp
tx-interval 10
#
....

#
interface GigabitEthernet0/0/1
undo shutdown
ipv6 enabl
healthcheck UPC-Health
service-manage http permit
service-manage https permit
ip address dhcp-alloc
#

#
interface Cellular0/0/0
dialer enable-circular
apn-profile lteprofile
dialer number *99# autodial
ip address negotiat
#
#
multi-interface
mode priority-of-userdefine
add interface Cellular0/0/0
add interface GigabitEthernet0/0/1 priority 8
#

...

nat-policy
rule name GuideNat1560756666397
egress-interface GigabitEthernet0/0/1
action nat easy-ip
rule name upc
egress-interface GigabitEthernet0/0/1
action nat easy-ip
rule name LTE
egress-interface Cellular0/0/0
action nat easy-ip
#
quota-policy
#
pcp-policy
#
dns-transparent-policy
mode based-on-multi-interface
#


  • x
  • convention:

Featured Answers
Moderator Created Jun 27, 2019 09:39:29 Helpful(1) Helpful(1)

  • x
  • convention:

Firewolf Created Jun 29, 2019 21:44:56 Helpful(0) Helpful(0)

I have it done!
But without
ip-route-static
comand. Thank you @Popeye_Wang
====My Config====
#
dns resolve
dns server 1.1.1.1
dns proxy enable
#
healthcheck enable
healthcheck name UPC-Health
destination 8.8.8.8 interface GigabitEthernet0/0/1  protocol icmp
times 2
#
interface GigabitEthernet0/0/1
undo shutdown
alias UPC
healthcheck UPC-Health
ip address dhcp-alloc
#
interface Cellular0/0/0
dialer enable-circular
apn-profile lteprofile
dialer number *99# autodial
ip address negotiate
#
apn profile lteprofile
apn internet
#
firewall zone untrust
set priority 5
add interface GigabitEthernet0/0/1
add interface Cellular0/0/0
#
multi-interface
mode priority-of-userdefine
add interface GigabitEthernet0/0/1 priority 2
add interface Cellular0/0/0
#
nat-policy
rule name upc
  egress-interface GigabitEthernet0/0/1
  action nat easy-ip
rule name LTE
  egress-interface Cellular0/0/0
  action nat easy-ip
#


  • x
  • convention:

All Answers
Popeye_Wang Moderator Created Jun 25, 2019 21:44:38 Helpful(0) Helpful(0)

Hello, Firewolf,
Do you mean that the DNS cannot be obtained when the outbound interface of the NAT change to the cellular interface?
What‘s the Scenario of 'LTE USB Stick for Internet failover'? Can you explain it more clearly?
  • x
  • convention:

Firewolf Created Jun 25, 2019 22:45:58 Helpful(0) Helpful(0)

Hello, Popey_Wang,
Right, when the Default Route has changed. The DNS Server obtained by DHCP, wil not change to the DNS Server for the celluar.
Yes i can. I want to use the LTE USB Stick only, when the UPC Internet connection to outside, www, is down. As backup connection.
  • x
  • convention:

Firewolf Created Jun 25, 2019 23:04:51 Helpful(0) Helpful(0)

--doublepost--
  • x
  • convention:

Popeye_Wang Moderator Created Jun 26, 2019 15:49:17 Helpful(0) Helpful(0)

Maybe you should configure the DNS Proxy instead of the DNS Transparent Proxy
#
dns resolve
dns server 8.8.8.8
dns proxy enable
#
  • x
  • convention:

Firewolf Created Jun 26, 2019 17:30:26 Helpful(0) Helpful(0)

Yes i think it too. I had planed to change the DNS adress.
Is there no guide, "How to configure/set up the backup LTE line"?
I want to switch the running network sessions to the Cellular interface, when GigabitEthernet0/0/1 interface has no internet/www access. Like HotStandby
  • x
  • convention:

Popeye_Wang Moderator Created Jun 27, 2019 09:39:29 Helpful(1) Helpful(1)

  • x
  • convention:

Firewolf Created Jun 27, 2019 16:46:50 Helpful(0) Helpful(0)

Thank you Popeye_Wang! This "Command Reference" is great and will help.
I will try it out next days.
  • x
  • convention:

Steelblue Created Jun 28, 2019 10:04:21 Helpful(0) Helpful(0)

Thank you for sharing,
Very interesting configuration, hoping to see the final result.
  • x
  • convention:

Firewolf Created Jun 29, 2019 21:44:56 Helpful(0) Helpful(0)

I have it done!
But without
ip-route-static
comand. Thank you @Popeye_Wang
====My Config====
#
dns resolve
dns server 1.1.1.1
dns proxy enable
#
healthcheck enable
healthcheck name UPC-Health
destination 8.8.8.8 interface GigabitEthernet0/0/1  protocol icmp
times 2
#
interface GigabitEthernet0/0/1
undo shutdown
alias UPC
healthcheck UPC-Health
ip address dhcp-alloc
#
interface Cellular0/0/0
dialer enable-circular
apn-profile lteprofile
dialer number *99# autodial
ip address negotiate
#
apn profile lteprofile
apn internet
#
firewall zone untrust
set priority 5
add interface GigabitEthernet0/0/1
add interface Cellular0/0/0
#
multi-interface
mode priority-of-userdefine
add interface GigabitEthernet0/0/1 priority 2
add interface Cellular0/0/0
#
nat-policy
rule name upc
  egress-interface GigabitEthernet0/0/1
  action nat easy-ip
rule name LTE
  egress-interface Cellular0/0/0
  action nat easy-ip
#


  • x
  • convention:

Reply

Reply
You need to log in to reply to the post Login | Register

Notice: To protect the legitimate rights and interests of you, the community, and third parties, do not release content that may bring legal risks to all parties, including but are not limited to the following:
  • Politically sensitive content
  • Content concerning pornography, gambling, and drug abuse
  • Content that may disclose or infringe upon others ' commercial secrets, intellectual properties, including trade marks, copyrights, and patents, and personal privacy
Do not share your account and password with others. All operations performed using your account will be regarded as your own actions and all consequences arising therefrom will be borne by you. For details, see " Privacy."
If the attachment button is not available, update the Adobe Flash Player to the latest version!

Login and enjoy all the member benefits

Login
Fast reply Scroll to top