topic Re: FTD 1010 WAN dual ISP Active\Standby and LTE 3rd backup in Network Security

FTD 1010 WAN dual ISP Active\Standby and LTE 3rd backup

HaniAbuelkhair6735 — Fri, 31 Mar 2023 12:40:57 GMT

I have FTD1010 and customer want to have dual ISP Active\Standby and LTE 3rd backup

So he need high availability by using dual ISP contention Active and Standby, and in case both ISP are down he need 3rd LTE backup for selected Phones and Computers only

IS that possible with FTD1010 ? and how

Thanks

Re: FTD 1010 WAN dual ISP Active\Standby and LTE 3rd backup

Rob Ingram — Fri, 31 Mar 2023 12:50:49 GMT

@HaniAbuelkhair6735 use IP SLA and track the primary and secondary ISP connections. If the first ISP link goes down the default route via that link is removed from the routing table, the default route (with a higher metric) of the secondary link is used. If both the primary and secondary links are down then use the tertiary link (LTE). If you wish to limit traffic on the 3rd LTE link then you can control that traffic in the ACP using zones or only create NAT rules for the phones and computer networks when using the LTE interface.

Re: FTD 1010 WAN dual ISP Active\Standby and LTE 3rd backup

MHM Cisco World — Fri, 31 Mar 2023 14:34:36 GMT

using PBR or ACL, that interest thing.
if I found something I will share here

Re: FTD 1010 WAN dual ISP Active\Standby and LTE 3rd backup

HaniAbuelkhair6735 — Fri, 31 Mar 2023 13:21:18 GMT

I found this is the active\standby

https://integratingit.wordpress.com/2021/05/06/ftd-dual-isp-using-fdm/

but not sure about the LTE 3rd backup

Re: FTD 1010 WAN dual ISP Active\Standby and LTE 3rd backup

Rob Ingram — Fri, 31 Mar 2023 13:29:24 GMT

Well the FPR1010 doesn't support LTE only ethernet interfaces, so you'd have to plug in a router with LTE to the firewall. Then treat it as another routed interface on the Firewall. Configure SLA and tracking for both the primary and secondary (as per the first response) and failover to the 3rd link.

Re: FTD 1010 WAN dual ISP Active\Standby and LTE 3rd backup

HaniAbuelkhair6735 — Fri, 31 Mar 2023 13:46:03 GMT

Thanks

So i will have 2 default route for the 1st and 2nd ISP or 3 even for the LTE ?

And for the Phones and selected computers they should have static IP ?