USG Pro, Multiple WAN IP's assigned to different VLAN's

[AB_IT]

Hello All

 

I've got a USG Pro that does our routing but I have two WAN IP's, one is used for our Broadband connection and the other for our phone system.

 

Is there a way I can tell the USG Pro of the phone systems WAN IP and get it to use this for our phone system VLAN devices?

 

Currently it's driving me up the wall as it's a bit of a messy setup, I've got it so the internet connection is split on a mini switch, it then goes between the USG Pro for our LAN and a DreyTek router for our phone system. I'd prefer to just get rid of the mini switch and Dreytek altogether so all the traffic routes through the USG Pro.

 

I hope this makes sense.

 

Thanks everyone

[ZeroHour]

Hmm I am not 100% sure you can on the USG Pro, I *think* it is possible on the Edgemax lines though.

[AB_IT]

Hmm I am not 100% sure you can on the USG Pro, I *think* it is possible on the Edgemax lines though.

Ah well that's gutting. I did see that someone said it could be done through this method https://community.ui.com/questions/USG-Pro-Multiple-WAN-IPS-mapped-to-various-internal-locations-How-To-Guide/796027d2-4eb1-45fc-a808-c1876fd6d2ed but I'm not 100% sure on what's going on here and it seems like a bit of a nightmare to manage.

 

If anyone has any good ideas of how I could improve it I'd really appreciate it but I suppose the setup I've got is the best I can do with my kit?

[ZeroHour]

On Edgemax (I personally have an edgerouter lite but single wan) it appears this: https://help.ui.com/hc/en-us/articles/204952274-EdgeRouter-Policy-Based-Routing shows how to do it.

 

It may be possible with a custom json file. This: https://community.ui.com/questions/Tool-Map-Multiple-WAN-IP-to-Local-IPs-on-USG/b7daf87d-84aa-4557-8ad8-2ff516252f91 has a link to a tool to try and help but I am not sure about the USG.

This: https://old.reddit.com/r/Ubiquiti/comments/ovxw5f/guidance_for_dual_wan_setup/ seems to be trying to do something similar.

 

I had been tempted for a USG but I kept reading how a lot of the stuff is hidden behind managing custom json files to get it to work.

[caffrey]

Yes you can although creating jsons isn't recommended

 

This was ours for routing vlan50 to our netsweeper gateway (192.168.5.252) vlan50 was 172.16.0.0/22

 

configure
set firewall source-validation disable
set protocols static table 5 route 0.0.0.0/0 next-hop 192.168.5.252
set firewall modify LOAD_BALANCE rule 2500 description "Traffic from Vlan 50 to Netsweeper"
set firewall modify LOAD_BALANCE rule 2500 action modify
set firewall modify LOAD_BALANCE rule 2500 modify table 5
set firewall modify LOAD_BALANCE rule 2500 source address 172.16.0.0/22
set firewall modify LOAD_BALANCE rule 2500 protocol all
set interfaces ethernet eth0 vif 50 firewall in modify LOAD_BALANCE
commit
clear connection-tracking
exit

[MatthewL]

USG's are not suitable for business needs or anything advance.

 

You can create jsons but if/when it reprovisions it wipes them. I'd cut your losses and replace, even if its a PC with pfsense on its better than a USG in my opinion. I would not run my network on one, I've got a few at satellite sites and have nothing but issues slowly trying to swap them out.