Secondary WAN

The Secondary WAN provides a backup WAN link via the Bumblebee CPE's ETH3 interface to increase a site's Internet uptime. When the primary WAN (ETH0) goes down, the Bumblebee CPE automatically begins forwarding traffic through the Secondary WAN. The Secondary WAN can be from a different ISP.

Below is a deployment diagram.

The Secondary WAN deployment diagram

Deployment Requirements

The primary WAN (ETH0) should be in Pass Through Mode, for example, a /29 DIA circuit. The secondary WAN (EHT2) should be in router mode with a /30 subnet. When traffic is forwarded by ETH2 interface, it is NATed by Bumblebee CPE.

To keep SD-WAN IPSec tunnels up after switching to secondary WAN, the firewalls and SD-WAN routers should use certificates to authenticate IPSec connection requests. If pre-shared keys are used, IPSec tunnels will not be able to re-establish after the switch over.

How to setup Secondary WAN

Follow the steps below to setup a WAN backup.

1. Login to the Bumblebee Portal

2. Click Internet CPE, Select a Bumblebee CPE

3. Click Actions -> Edit Secondary WAN

4. A pop up window is displayed. Select Router Mode

5. Configure the IP address, Default Gateway and DNS

6. Click Enable Source NAT

7. Click Save