Hi @Andres123 

Thanks for posting in our business forum.

Direction means the out-flow traffic from LAN to WAN. It does not mean a specific port. After you pick up this, then you select the WAN port in the settings below.

Hi @Andres123 

What's your goal? The sole goal is to force all traffic on other computers to flow through WAN1. Just a single one uses WAN2. Do you need load balance functioning and do you need a link backup for all other computers?

I can point another way, just use the Policy Routing. Route all traffic from other computers to WAN1. And a single IP for this PC to WAN2.

No load balance is available for all of them. That'll be Priority or Only mode.

Priority for the only PC which allows the PC to enjoy the backup link on WAN1.

Only mode for all other computers. Never switch to the WAN2.

Does this fit your expectation?

Hi @Andres123 

What you can route is layer 3. Routing happens to layer 3 alone. So, we cannot route the ports.

This is more like to be ACL. But can you take a look at the Policy Routing? It should be the one you asked for.

If you just wanna force ports x and y to flow through WAN2, then your mode has to be Only. This PC will only allow ports x and y to flow through WAN2. Other devices don't take up WAN2.

If you just need it to enjoy the backup link and still force x and y to be accessible, on WAN2, if this is port forwarding, you don't create a port forward rule on WAN1. Then it's not open. Problem solved.

Hi @Andres123

It's been several back and forth replies. This is making it too complicated.

I think I need to conclude what you request here:

1. You require failover on WAN1 and WAN2. WAN2 is up when WAN1 is down.

2. On WAN2, just a device x.x.x.x will have access to the public IPs, and ports x and y (The ports are destination ports, right? Not gonna be port forwarding)

And several parts I gotta explain clearly:

You don't need to maintain a list of devices because you can set an IP group to include and exclude IP addresses.

You don't have to add them to the routing table. Unless you are doing something else.

Order:

Rule 1

WAN=WAN1

No failover.

Rule 2

WAN=WAN1

X & Y IP-Port Group is specified as the port X and Y only. The subnet can be optional or 1.0.0.0/1

Hi @Andres123 

Thanks for posting in our business forum.

Are you able to use the software controller which enables you to do like what I do? As you can see that I can implement that in Controller mode.

Before you integrate this into the controller, make sure you back it up. Controller adoption will reset the deviec first.