Operation Manual

the other side: The Local Identity must match the Remote Identity on the other side of the tunnel, and vice versa. In
this case, these identities can each be a simple word.
2. The Tunnel Name for the side of the tunnel that is not behind the NAT firewall must be “anonymous.”
3. The VPN tunnel must be initiated from the side that is behind the NAT firewall.
WAN Affinity / Load Balancing
Load Balance
Select the Load Balance Algorithm from the following dropdown options:
Round-Robin: Evenly distribute each session to the available WAN connections.
Rate: Distribute load based on the current upload and download rates. A WAN device's upload and download
bandwidth values can be set in Internet → Connection Manager.
Spillover: This was the default algorithm in older (version 3) firmware. Load is always given to devices with the
most available bandwidth. The estimated bandwidth rate is based on a combination of the upload and download
configuration values and the observed capabilities of the device.
Data Usage: This mode works in concert with the Data Usage feature (Internet → Data Usage). The router will
make a best effort to keep data usage between interfaces at a similar percentage of the assigned data cap in the
data usage rule for each interface, rather than distributing sessions based solely on bandwidth. For proper
functioning you need to create data usage rules for each WAN device you will be load balancing. Make certain to
select the "Use with Load Balancing" checkbox in the data usage rule editor.
WAN Affinity
WAN Affinity rules allow you to manage traffic in your network so that particular bandwidth uses are associated with
particular WAN sources. This allows you to prioritize bandwidth.
EXAMPLE: You could specify that your guest LAN is only associated with your Ethernet connection with no failover.
Then if your Ethernet connection goes down and the embedded modem connects for failover for your primary LAN, your
guest LAN will not take bandwidth from your primary LAN, saving you money.
Click Add to open the WAN Affinity Policy Editor and create a new WAN Affinity rule.
160