Router Mode

The Router mode feature can be enabled and configure in Express, but support is only available for Plus since routing, policy based routing, gateways and high availability can get complicated and unique to each case.

Overview:

In router mode, only the wan0 interface is used. In this mode Wanos supports two or more ip addresses on the same interface. Primary wan0, Secondary virtual lan0. Both addresses bind to the wan0 interface.

Traffic from the wan should be directed to the standard wan0 ip address. Traffic from the lan should be directed to the virtual lan0 ip address.

All sites can be in router mode or a mix of router mode and bridge mode.

Basic Configuration:

In bridge mode (Layer2), the inside and outside interfaces indicate the source of the traffic. In router mode (Layer3) , we use the same principle, but use two IP addresses on the same interface. In router mode, only the wan0 physical interface is used. Both inside and outside addresses bind to this interface.

To enable router mode, the lan0 virtual ip address is configured by editing the config file with IP Address and mask e.g. 192.168.1.254/24

vi /tce/etc/wanos/wanos.conf
VIRT_LAN0=172.16.1.201/24
To exit vi press:
<esc> :wq

A soft reset from the gui would be needed to apply the change. After the soft reset the virtual IP address will be accessible on the wan0 interface along with the primary address. Using source based routing traffic from the lan can be directed to the lan0 virtual ip address. Traffic from the Wan can be redirected to the primary wan0 address.

The secondary ip address can be on the same range as the primary e.g.: Wan0 = 172.16.1.200 Lan0 = 172.16.1.201

Verification

While pinging a host at the remote site. tcpdump should produce the following output on wan0: sudo tcpdump -i wan0 host x.x.x.x

Remember to enable promiscuous / mac spoofing or equivalent.

Stop here for the initial configuration. "VIRT_LAN0" is the only Wanos config required.

Advance setup with multiple subnets: (Optional)

Multiple secondary lan0 networks are also supported, if the workstations will direct their default gateways directly to the virtual gateways configured on Wanos. To configure these multiple additional virtual lan0 networks, these extra networks can be added to /tce/etc/wanos/virtual_lan.

e.g:
10.1.1.1/24
10.2.2.1/24
10.3.3.1/24

All these networks will be available as secondary virtual IP addresses to be used as gateways for the workstations or servers.

Example 1:

In the diagram the Wan Accelerator is deployed out of path at the main site. Traffic from the wan is directed to the wan0 address 10.0.0.2. Traffic from the lan that needs to be optimized is directed to the virtual lan address 10.0.0.1

Example 2:

In the following diagram the data center wan accelerator primary address shares a segment with the gateway router. Traffic from the wan is directed to the wan0 address 10.0.0.2. Devices on the lan have their default gateways set to be the wan accelerator virtual lan addresses 10.1.1.1 and 10.2.2.1. High availability is possible by configuring secondary routes.

Example 3:

Another PBR example.

The router has an IP address of 10.0.0.254. Wanos has 10.0.0.1 for wan0 and secondary virtual address 10.0.0.2. Both bind on the physical wan0. Here the router is used to channel IP traffic from the WAN interface to 10.0.0.1. The router has a second policy to channel IP traffic from the lan servers to 10.0.0.2.

The Wanos addresses can be tracked to disable the policy redirect. Remember to not enable PBR on the same router (sub-)interface that Wanos is connected to, else traffic from Wanos will be redirected to itself. Since Router mode requires routing on the network, it is recommended to use the simple bridge mode where possible.