SRX5308 Load balancing with protocol binding problem

Question

I have 3 Internet connections in load balancing mode. All outgoing traffic to a specific IP adress (mail hub) must go through specific WAN port where I have a dedicated IP address. If any other WAN port is used the mail hub rejects the message.

Protocol binding has been setup but when this spesific WAN port fails it switches to any other WAN port available and emails are rejected. I would prefer no outgoing packets at all if the spesific WAN port is down to avoid rejected mails and the internal mail server could send the message again when the WAN port becomes available.

DaneA · Answer

Hi&nbsp;herrmann_daniel,
&nbsp;
A few questions:
&nbsp;
a. &nbsp;What is the current firmware version of your SRX5308?
b. &nbsp;What load balancing method is currently selected?
&nbsp;
Kindly try these steps: &nbsp;
&nbsp;
1. On the web-GUI of the&nbsp;SRX5308, go to&nbsp; Security &gt; Firewall &gt; Attack Checks. &nbsp;Make sure&nbsp; the IPv4 radio button is selected by default on the upper right of the screen. &nbsp;
2. Uncheck "Block UDP Flood" under LAN Security Checks.
3. Click Apply.
&nbsp;

&nbsp;
Hope this helps. &nbsp;Welcome to the community&nbsp;:smileyhappy:
&nbsp;
&nbsp;
Regards,
&nbsp;
DaneA
Netgear Community Team
&nbsp;
&nbsp;

herrmann_daniel · Answer

Hi DaneA, a. Firmware is 4.3.3-5 b. Load balancing method is Weighted LB Block UDP flood is not checked. What is the behavior I should expect if protocol binding is configured and the internet connection on the WAN port that is programmed is down? Should packets go through any other WAN port available? Or should they just not go through? Regards, Daniel

DaneA · Answer

Hi&nbsp;herrmann_daniel,
&nbsp;
Thanks for your response.
&nbsp;
With regard to your concern, since you have 3 WAN connections, let say for example WAN1 port goes down, &nbsp;all of the services that are binded to it will be all down and it will not switch to any other WAN ports.
&nbsp;
&nbsp;
Regards,
&nbsp;
DaneA
Netgear Community Team

herrmann_daniel · Answer

So there is in fact a problem. I created a rule in Protocol Binding that says that any service from a single lan address to a single Internet address should go through a specific WAN port. I use this to send emails from our internal mail server to an Internet mail hub. This mail hub rejects all messages that do not come from a specific IP address. Checking the log of the mail hub I can see that it receives sometimes mails from one of the other WAN connections. I don't know if this happens due to connection failures on the specific WAN connection or if the Protocol Binding is not working correctly. Is there any way I can troubleshoot this further?

DaneA · Answer

Hi&nbsp;herrmann_daniel,
&nbsp;
Based from you have previously stated, do you have any inbound or outbound firewall rules configured on your&nbsp;SRX5308?&nbsp;
&nbsp;
&nbsp;
Regards,&nbsp;
&nbsp;
DaneA
Netgear Community Team

Forum Discussion

SRX5308 Load balancing with protocol binding problem

8 Replies

Related Content

SRX5308 Protocol Binding Services PORT 443 LB

SMB Protocol

Load balancing issue with SRX5308 - address not found

gss116E Disable Spanning Tree Protocol (STP) and forward Bridge Protocol Data Units (BPDUs)

Bridge 2 Networks with SRX5308 Help

NETGEAR Academy

ProSupport for Business