Query for new setup

Query for new setup

Query for new setup
Query for new setup
Yesterday
Model: ER605 (TL-R605)  
Hardware Version: V2
Firmware Version:

Hi All,

 

Just need a sanity check on this one before I start adjusting my network.

 

I've currently got 2x Archer VR1210v routers (Site A & Site B) along with an ER605 (Site A)

 

At site A I will have three internet connections soon for failsafe (Copper line, satellite & 4g) due to this I've picked up an ER605 for it's dual WAN capabilities.

 

The config I'm thinking would be as follows:

 

SITE A:

 

Archer VR1210v with copper & fallback of 4g connected into WAN2 of ER605

 

Satellite connection going into WAN1 of ER605 enabled as a fallback if WAN2 loses connection (This is the fastest connection hence why I want it primary)

 

I'm not hooking the USB 4G Modem into the ER605 as if WAN1 fails it will only allow fallback to WAN2 as far as I can see, I'm unable to select both WAN2 & USB as potential options. I'm thinking in this case if WAN1 fails it falls back to WAN2, if WAN2 also has a fault the VR120v will fall itself back to 4g.

 

From the ER605 I'm then connecting up a 16 port switch to go to various endpoints along with a WiFi access point. The VR1210 will have its WiFi disabled and no actual clients connected to it.

 

In this instance am I best disabling DHCP on the VR1210 and letting the ER605 handle this instead or would that cause an issue with the ER605 not being able to connect at all?

 

Also I'm looking to create an IPsec tunnel between both Site A & Site B.

 

Site B is on a dynamic IP however I am going to enable the TP Link dynamic DNS service on there to overcome this.

 

At Site A the satellite connection has a static IP however the copper line does not, in this instance I'm guessing I setup the IPSec tunnel on the ER605 rather than the VR1210 in order to access the network as otherwise I'll end up connecting via the slower copper line connected to the VR1210?

 

Apologies if this is confusing, my brain is now fried. I'm fairly technical however my expertise is in building computers rather than networking!

 

Reason I want to connect both is as I run a Jellyfin server at Site A along with holding network folders, I would like these accessible easily to Site B along with then allowing me to store another NAS at site B to hold offsite backups. I currently do this via Tailscale however I want to omit that if possible.

 

Thanks

  0      
  0      
#1
Options
1 Reply
Re:Query for new setup
15 hours ago

Hi @Kerryw92 

Thanks for posting in our business forum.

1. IPsec requires a public IP. Though you mentioned that you have static and dynamic connections, it does not say the IP type.

Not just IPsec, all VPN require public IPs. You should check if you have a public IP on your VR device or not.

2. It would be best to set the VR device to bridge mode instead of router mode. If you plan to create a VPN and would like to use the router as the primary device for NAT and DHCP.

3. IPsec may not work well behind the NAT even if you port forward. Just note this.

4. DDNS and Load balance works. Note that load balance does not load balance your IPsec. If primary is down, you are gonna lose IPsec. Most LTE is providing CGNAT. Not public IP.

Best Regards! If you are new to the forum, please read: Howto - A Guide to Use Forum Effectively. Read Before You Post. Look for a model? Search your model NOW Official and Beta firmware. NEW features! Subscribe for the latest update!Download Beta Here☚ ☛ ★ Configuration Guide ★ ☚ ☛ ★ Knowledge Base ★ ☚ ☛ ★ Troubleshooting ★ ☚ ● Be kind and nice. ● Stay on the topic. ● Post details. ● Search first. ● Please don't take it for granted. ● No email confidentiality should be violated. ● S/N, MAC, and your true public IP should be mosaiced.
  1  
  1  
#2
Options