Secondary WAN

The Secondary WAN provides a backup WAN link via the Bumblebee CPE's ETH3 interface to increase a site's Internet uptime. When the primary WAN (ETH0) goes down, the Bumblebee CPE automatically begins forwarding traffic through the Secondary WAN. The Secondary WAN can be from a different ISP.

Below is a deployment diagram.

The Secondary WAN deployment diagram

Deployment Requirements

The primary WAN (ETH0) should be in Pass Through Mode, for example, a /29 DIA circuit. The secondary WAN (EHT2) should be in router mode with a /30 subnet. When traffic is forwarded by ETH2 interface, it is NATed by Bumblebee CPE.

To keep SD-WAN IPSec tunnels up after switching to secondary WAN, the firewalls and SD-WAN routers should use certificates to authenticate IPSec connection requests. If pre-shared keys are used, IPSec tunnels will not be able to re-establish after the switch over.

How to setup Secondary WAN

Follow the steps below to setup a WAN backup.

1. Login to the Bumblebee Portal

2. Click Internet CPE, Select a Bumblebee CPE

3. Click Actions -> Edit Secondary WAN

4. A pop up window is displayed.

5. Click Enable Secondary WAN

6. If Eth2 will dynamically obtain an IP address as a DHCP client. Click the button DHCP Client

7. Or else (Eth2 will be configured a static IP address)

   1. Enter IP address in CIDR

   2. Enter the Default Gateway IP

   3. Enter one or list of DNS IP addresses separated by comma

8. Click Save