D-Link Forums

The Graveyard - Products No Longer Supported => D-Link NetDefend Firewalls => Topic started by: otrotabi on April 19, 2017, 01:26:31 PM

Title: DFL-210 WAN2 physical connection
Post by: otrotabi on April 19, 2017, 01:26:31 PM
Hi. I need to connect a second VDSL internet modem to our DFL-210 firewall. As far as I have read, this is possible but I have not been able to find out where I should connect the second internet input, as our firewall has only one WAN port. Should I connect it to a different LAN port ?

So far our internet connection input is through the WAN port, and then we connect a LAN PORT to a switch where the rest of our internal computers are connected.

Thanks for your help 
Title: Re: DFL-210 WAN2 physical connection
Post by: FurryNutz on April 19, 2017, 01:34:11 PM
Link>Welcome! (http://forums.dlink.com/index.php?topic=48135.0)


WAN Port is for the main ISP connection from a cable or DSL modem.
DMZ port is for the connection of an Ethernet cable to an DMZ network.

I don't see two actual WAN ports needed for fail over of ISP services from using two modems.
Title: Re: DFL-210 WAN2 physical connection
Post by: otrotabi on April 20, 2017, 06:10:35 AM
Thanks,

I am not in USA I´m afraid but hoping to get a little help. I´m located in Argentina.

There´s a configuration example from D-Link called "Scenario: How to configure WAN load sharing and failover for two ISPs using policy based routing" which seems to apply to DFL-210/800/1600/2500 according to the note. I downloaded it from here (https://dlink-manuals.org/dlink-howto-configure-wan-load-sharing-and-failover-for-two-isps-using-policy-based-routing-on-dfl-210-800-1600-2500/). Unless this is wrong, it seems possible to use 2 ISP with a DFL-210.

However this note covers only the software issue, not where to connect the second wan. If you could just tell me that I will try to follow this example.

Thanks again.
Title: Re: DFL-210 WAN2 physical connection
Post by: FurryNutz on April 20, 2017, 01:30:57 PM
That document mentions the use of WAN1 and WAN2 interfaces. These are actual physical LAN cable PORTs on the back of the firewall appliance device. If this model DFL does not have two physical WAN ports, then maybe either configuration is done in the UI and maybe the 2nd ISP modem is connected to the DMZ port maybe. I don't know for sure.

I recommend that you phone contact your regional D-Link support office and ask for help and information regarding this. We find that phone contact has better immediate results over using email.
Let us know how it goes please.

Also FYI:
"This product has been discontinued.
Free support for this product has ended on 11/01/2016"

Maybe time to get a newer generation firewall appliance that supports two WAN ports.
Title: Re: DFL-210 WAN2 physical connection
Post by: otrotabi on April 20, 2017, 02:08:00 PM
Thanks. Yes I did try phone support a week ago but I still have no answer from an engineer, so I figured I would give it a try here. Maybe it´s because of the end of support date you mention.

I am trying to figure out which new appliance to buy. I admit D-link works fine but has turned out to be very difficult to configure for me.

Regards

José

Title: Re: DFL-210 WAN2 physical connection
Post by: FurryNutz on April 20, 2017, 02:12:51 PM
Ya possible they may not support it anymore.

I don't see any newer generation firewall devices on there web site. D-Link may not be Mfr'g newer models.
You may want to review this line of router which has dual WAN port support and seems to have fail over support:
http://us.dlink.com/products/business-solutions/unified-services-router-w-wan-failover/ (http://us.dlink.com/products/business-solutions/unified-services-router-w-wan-failover/)
Title: Re: DFL-210 WAN2 physical connection
Post by: otrotabi on April 21, 2017, 04:12:26 AM
Thanks for your suggestion. From a quick look at our local market it seems D-link has retired from this business, at least here. I was looking at Cisco´s RV-042, it looks easier to configure for a non-expert. Small company, 2 servers that are accesed only from the local LAN and only one place from outside, what do you think ?
Title: Re: DFL-210 WAN2 physical connection
Post by: FurryNutz on April 21, 2017, 10:55:58 AM
Ya, D-Link seems to have scaled back on a few areas and product lines. I would go with something that is easy to use and best suites your needs. Make contact with Cisco about the model your looking at and ask questions and make sure you get all the information you need before purchasing. I'm sure you'll be fine.
Title: Re: DFL-210 WAN2 physical connection
Post by: otrotabi on April 27, 2017, 05:48:27 AM
In case anyone has the same doubt I had, I got an answer from a Dlink engineer saying that for the DFL-210, the DMZ connection shoud be configured as WAN2. I will try to replicate the application note and see if it works.
Title: Re: DFL-210 WAN2 physical connection
Post by: FurryNutz on April 27, 2017, 09:52:19 AM
Let us know how it goes.
Title: Re: DFL-210 WAN2 physical connection
Post by: FurryNutz on July 03, 2017, 03:22:20 PM
Where you able to get this going? Any progress on this?

Quote from: otrotabi on April 27, 2017, 05:48:27 AM
In case anyone has the same doubt I had, I got an answer from a Dlink engineer saying that for the DFL-210, the DMZ connection shoud be configured as WAN2. I will try to replicate the application note and see if it works.
Title: Re: DFL-210 WAN2 physical connection
Post by: gouster4 on July 03, 2017, 03:30:06 PM
Change DMZ Route metric to 80, then create ip rules same as lan_to_wan, but for dmz instead of wan.
Title: Re: DFL-210 WAN2 physical connection
Post by: FurryNutz on July 04, 2017, 10:17:36 AM
Awesome info. Thank you for sharing. Hope this helps future users.

Enjoy.  ;)