Anyone here testing "Interface Bound States" on Dual WAN?
-
And care to offer any feedback? Unfortunately, I don't have Dual WAN at home, but all my installs do.
I used to have Dual WAN here, but my fibre has been so reliable I decided to save a few bucks, which I am
sorta kinda regretting.Thanks!
-
I've tested a bunch of different scenarios with multi-wan and interface bound states. Everything works as expected now. I didn't initially!
Anything in particular?
Steve
-
@stephenw10 No nothing in particular. I read this State Policy Default Change blog post, but real life can sometimes be different and I have no way to test dual wan! So I was looking for others that are.
Since many home users don't have dual WAN or CARP, maybe it's not being thoroughly tested in the wild? Which is what I expect, and again no problem but I will be cautious to when I upgrade upon release just to see. It's all good.
Thanks!
Edit: I forgot to add that I know you can switch back, but the more secure policy sounds like a good thing and I want to do it! :-)
-
Yup interface bound is definitely more secure. The floating states have surprised a few people in the past. I'm sure there will be some obscure setups that are unknowingly relying on them though. Even though they are almost certainly bad configurations