Using LTE Hotspot feature as failover WAN?

Question

Level 1

118 points

Using LTE Hotspot feature as failover WAN?

Recently, when our COX internet went down, I thought about how I could use the hoptspot feature on my iPad 3 with Verizon 4G LTE as a temporary internet source for our network on the rare occassion when COX goes down.

I acquired a wireless bridge, and wirelessly connected it to the Verizon hotspot on my iPad then connected the bridge to the WAN failover port on my Sonicwall.

I went about testing it, and pulled the plug on the COX internet. My Sonicwall switched over the failover WAN and within a minute or so, I was able to surf on my desktop PC using the Verizon LTE and iPad Hotspot connection! So, that part works.

Next, I need incoming and outgoing email through my Exchange server. So, I configured my Postini service with a failover IP address, that being the IP of the Verizon LTE I had acquired. Unfortunately, no email ever reached my Exchange server. I could see through Postini that it was showing failed connections to both my IP addresses (normal and failover). I double-checked my Verizon IP and it was correct.

So, the only thing I can think is that Verizon is blocking SMTP on the hotspot sharing feature? Can anyone confirm this? Is there a way around this?

I'd sure like to take advantage of this functionality if it's possible. We're a very small home office and would be utilizing minimal traffic over this connection.

Thanks.

Posted on Jul 21, 2012 9:47 AM

Reply

Answer 1

Best reply

OverviewComputerServices

Level 1

4 points

Nov 15, 2012 12:04 AM in response to Darryl Mylrea

Good Evening,

I did this for two of my clients; one of which uses exchange:

Due to Hurricane Sandy hitting us and Internet connections going up and down without warning (or not coming back up for weeks), I have used a Verizon MiFi 4G LTE connected WIFI to a laptop with ICS configured for all services that I needed and the Laptop's LAN connected to the Failover Port on our SonicWall TZ 200 that I configured for LB/Failover. I was able to send out through Exchange and the client's server was able to recieve as well. It did not seem like any incoming or outgoing ports were blocked, although the client does not use postini, we were able to set our second MX to the DDNS that we configured for the failover connection (you will never get the same IP twice with a 4G connection, they are dynamic) and have not had any issues, it actually worked. The client's primary ISP comes and goes.

We did not use postini however so that is our main difference. In addition, we did not use a wireless bridge we used a laptop but that should not matter. In theory this should work and in practice without postini it has worked for me. Have you tried contacting the verizon wireless team about them blocking ports on your device?

We are using a Verizon Wireless MiFis that are on a no contract month-to-month plan.

- Marc Menzies

Reply

Answer 2

Darryl Mylrea Author

Level 1

118 points

Nov 15, 2012 6:50 AM in response to OverviewComputerServices

Thanks Marc, for the info. The only difference that would matter is that I used an iPad HotSpot connection and you used a MiFi device. Wonder if that had anything to do with it?

I did recently setup a MiFi for a client as their main WAN connection through a TZ215, with their existing SLOW T1 as the failover/secondary, and routed email through the T1 to keep their static IP on email. Unfortunately, they were eating 2GB per day in bandwidth, and we had to shut it down after they reached their 10GB limit as it was not feasible for day-to-day use (although they really enjoyed the 12MB/s up and down speeds of the 4G LTE they had with the MiFi.

Thanks for sharing your experience.

Reply

Answer 3

Jan 15, 2013 7:41 PM in response to Darryl Mylrea

Darryl, in the configuration you set up, your iPad was functioning as a NAT router connected through the transparent wireless bridge to the WAN failover port of your SonicWall. The iPad was also functioning as a DHCP server, and assigned the WAN failover port some private IP address like 172.blah.blah.blah... As a result, no incoming traffic would be able to hit the WAN failover port on your SonicWall without some port forwarding rules in place on the iPad personal hotspot service. Port forwarding is not something that the iOS personal hotspot is able to do.

Of course, I would love for that function to be rolled into personal hotspot, but there are cell carriers involved with decisions that affect how their data plans can be used.

Reply