Enterprise Router Internet and enterprise network access load balancing

(This article applies to TL-ER6120 V1.0, TL-ER5120 V1.0, TL-ER5520G V1.0, TL-R483 V3.0, TL-R478 + V5.0, TL-WVR300 V1.0)

Some application environments, such as enterprises or schools, have their own internal network and need to access the Internet. Multiple WAN port routers are selected to connect both the internal network and the Internet. If no corresponding settings are made, the data accessing the internal network may be sent to the Internet. Similarly, the data accessing the Internet may be sent to the internal network, resulting in the abnormal access to the network. How can I set a normal internal network and normal Internet access.

This article will take the TL-ER5120 as an example to show the load balancing configuration process.

[Requirement description]

A company's internal network is "10.0.0.0/24", while connected to the Internet external line, now need to use TL-ER5120 to achieve all the access to the internal network data sent to the internal network, access to the Internet data through the Internet line.

As shown in the figure, the WAN1 port is connected to the internal network and the WAN2 port is connected to the Internet.

Procedure:

1. Set the router to the dual-WAN port mode (TL-WVR300 default dual-WAN port, do not need to change ):

Interface settings> WANPort mode:Select "dual-WAN port" to save. After the configuration is complete, the first two interfaces (from left to right) on the front panel of the router are the two WAN ports of the router.

2. Set WAN port network parameters and upstream/downstream bandwidth:

Interface settings> WANPort settings:"Set the network parameters of the WAN port and the upstream and downstream bandwidth values of the line in WAN1 settings and WAN2 settings.

Note: Enter the upstream and downstream bandwidth values of the line!

3. Set a traffic balancing policy:

Traffic balancing>Policy SelectionPage, add the following two rules:

① The data specified to access the frontend intranet "10.0.0.1-10.0.0.254" is forwarded by WAN1:

② All data destined for access to other network segments is forwarded by the WAN2 Port: