Failover WAN being used with Primary is still up

skenigma

I have two WAN Connections,

WAN1 - Highspeed - Unlimited
WAN2 - Backup - Metered

I have a gateway group with WAN1 as Tier 1 and WAN 2 as Tier 2 with failover mode in "Member Down" setting

Default gateway is set to the gateway group

There are no policy routes that are set to use a specific gateway

However I am seeing a bunch of traffic on WAN2 even when WAN 1 is up.

Expected behaviour would be no traffic across WAN2 unless WAN1 goes down.

WAN2 is a metered connection, and I don't want to be charged for usage when it should not be used.

What am I doing wrong?

marcg

@skenigma Do you have "Kill all states for lower priority-gateways" configured in Gateway Monitoring?

Also, this recent thread may be useful.

skenigma

@marcg
I do have "Kill all states for lower priority-gateways"

The problem is not the failing back to the primary, it is while the primary is still up.

As soon as I connect the secondary it starts passing traffic in a load balancing mode instead of sitting idle waiting for the primary to fail (expected).

Hope these help

skenigma

I just reconnect the backup wan, and the state table exploded,

I see the route table still shows the secondary as a default route.

viragomann

@skenigma
Is the monitoring enabled for the primary gateway?

Check Status > Gatewayx. Are both WAN gateways shown up as online (monitored)?

skenigma

@viragomann

Yes Both Are Monitored.

marcg

@skenigma check your DM/chat

skenigma

Looks like I may have found my issues.

I had setup a policy route for testing the connection. I had also deleted that route before opening this request here so I had discarded it. But I think because my computer that was used for the test kept re-establishing sessions, the state table kept re-adding the states.

I have since killed all states after bringing the secondary connection back online (I kept it unplugged unless testing as I didn't want to kill my metered connection) and rebooted the computer that was used in testing. now the only states I am seeing on the secondary are the expected ones for gateway monitoring.

Thank you @marcg and @viragomann for your assistance.

skenigma

Looks like this is starting to happen again.

However it is limited, only some traffic is being routed over the backup connections.