XG7100-1U Multiple WAN with 1 to 1 Mapping to Multiple LAN



  • I have an XG7100-1U and @stephenw10 was nice enough to help me get going with a break-out of the interfaces for individual use on multiple WAN's and multiple LAN's. I set up all the filtering and tunnels needed but it occurred to me that I will need for certain LAN's to go out over specific WAN's.

    Here is my configuration of the Ethernet Interfaces:

    Interfaces / VLANs
    Interface VLAN tag Description Usage
    lagg0 4081 Eth1 WAN-1
    lagg0 4082 Eth2 LAN-1
    lagg0 4083 Eth3 WAN-2
    lagg0 4084 Eth4 WAN-3
    lagg0 4087 Eth7 LAN-2
    lagg0 4088 Eth8 LAN-3

    Interfaces / Switch / System
    VLAN group VLAN tag Members Description
    0 1 Default System VLAN
    1 4081 1,9t,10t Eth1
    2 4082 2,9t,10t Eth2
    3 4083 3,9t,10t Eth3
    4 4084 4,9t,10t Eth4
    7 4087 7,9t,10t Eth7
    8 4088 8,9t,10t Eth8

    What I need is to ensure that the LAN's can only use their corresponding WAN's for inbound/outbound traffic, for example, LAN-1 can only send/receive over WAN-1, LAN-2 to WAN-2 and so on. Each WAN is from a different provider so basically 3 different organizational units within the building on 3 different networks and 3 different providers.

    I have tried creating firewall rules however it does not manage the routing portion so that was not working. I tried Manual NAT but apparently that was not correct either (unless I am really doing something wrong which is entirely possible).

    Any advise would be appreciated. Thanks.


Log in to reply