Policy routing with dual WAN based on client MAC address

Goal

To use the Digi 6350-SR/6355-SR in tandem with its primary WAN Ethernet port, and always send traffic from certain client device(s) through the cellular modem based on the client MAC address(es).

Setup

This example assumes the LAN ports are operating under default settings, which provide DHCP connectivity to devices connected to the router's LAN ports. For details on Digi 6350-SR/6355-SR default settings, see the Digi 6350-SR/6355-SR User Guide. For details using aView to configure the Digi 6350-SR/6355-SR, see aView User Guide.

For this set up, you need

• Primary WAN Ethernet connection
• Cellular modem connection
• MAC address of any client devices you want to always use the cellular modem connection

Sample

The sample configuration below shows a router with two Internet connections: a cellular-based WAN connection through the router's modem and a broadband-based WAN connection through the router's WAN Ethernet port.

This setup shows two client devices on a router's LAN ports: a VoIP phone and a laptop. The VoIP phone and the laptop receive their IP address via DHCP from the router.

The policy-based routing does the following:

• Router uses the Ethernet WAN as its primary interface.
• Router has a cellular modem connection used as a secondary WAN interface.
• All traffic from the VoIP phone goes through the cellular modem WAN interface.
• Any traffic from other LAN devices goes through the Ethernet WAN connection.
• If the Ethernet WAN connection is down, the router sends traffic from all client devices through the cellular modem.
  • (optional) If you want traffic from the VoIP phone to go through the cellular modem only and block traffic from the laptop from going through the cellular modem, see the firewall rules in Per-device policy-based routing with dual WAN.

Sample Configuration

Open the configuration profile for the router and make the following changes.

1. Under Network -> Routes -> Policy-based routing, setup a new policy with the following settings:

Interface: Modem

Source address -> Type: MAC address

Source address -> MAC address: 52:54:00:c2:a5:43

Destination address -> Type: Zone

Destination address -> Zone: External

2. If you would like to apply the same MAC-based policy route to multiple client devices, create a new policy-based route for each client device using the correct MAC address for each device.