Configuring Global Route Selection Policies

Procedure

1. Configure an interface.
   1. Choose Network > Interface.
   2. Click of the specified interface.

      The interface is an intelligent uplink selection member interface. Before you add a member interface for intelligent uplink selection, you need to configure the interface first.

   3. Complete basic interface settings, such as setting the IP address and subnet mask and assigning the interface to a security zone. The details are omitted.
   4. Select Multi-egress options and configure the intelligent uplink selection member interface.

      Parameter	Description
      Default Gateway	Gateway address of the interface. You do not need to configure the gateway address for the PPPoE interface, Dialer interface, Tunnel interface.
      (Optional) Carrier	Select a carrier from the drop-down list. Usually, the carrier of the link connecting to the outbound interface is selected. After you select a carrier for the intelligent uplink selection member interface, the interface is added to the ISP interface group.
      (Optional) Carrier Route	After you enable the ISP route function, the FW will generate static routes in a batch to the ISP network. The destination is an IP address in the ISP address file, and the next hop is the gateway address specified on the outbound interface. Choose Network > Route > Routing Table. You can view the generated ISP route entries.
      (Optional) Default Route	If default routes are enabled, the FW automatically generates a default route with the next hop being the gateway address set on its interface. If default routes are disabled, the FW does not automatically generate default routes.
      (Optional) Health Check	Select an existing health check from the drop-down list to check the health of the link. The FW selects a link from only healthy links.
      (Optional) Ingress Bandwidth	Inbound bandwidth of the link.
      (Optional) Egress Bandwidth	Outbound bandwidth of the link.
      (Optional) Overload Protection Threshold	Bandwidth usage of the link. Before specifying Overload Protection Threshold, you must configure Inbound Bandwidth or Outbound Bandwidth. If this threshold is not specified, excess traffic will be discarded after the traffic exceeds the interface processing capability. If the bandwidth and overload protection threshold are specified, when the bandwidth usage exceeds the overload protection threshold, the FW excludes the overloaded links during intelligent uplink selection and selects a link from the links that are not overloaded. When the bandwidth usage of an overloaded link is lower than the overload protection threshold, the link is re-involved in intelligent uplink selection. When all links are overloaded, the FW will forward traffic based on the specified intelligent uplink selection mode, regardless of whether the links are overloaded. NOTE: When you set the intelligent uplink selection mode to load balancing by link bandwidth, you must set bandwidth for the member interfaces, and you are advised to set overload protection threshold. When you set the intelligent uplink selection mode to other modes, you are advised to set link bandwidth and overload protection threshold to achieve the best effects.

   5. Click OK.
2. Optional: Configure an interface group.
   1. Choose Network > Route > Intelligent Uplink Selection.
   2. Click the Interface Group tab and then click Add, bind intelligent uplink selection member interfaces to a common interface group.

      Parameter	Description
      Resource Name	Name of the common interface group.
      Member Interface	Intelligent uplink selection member interface bound to the interface group. You can use the following methods to add a member interface to or delete a member interface from an interface group: Add a member interface: Click to bind all member interface to an interface group. Or select the interfaces to be bound in Selectable and click to bind the interfaces to the interface group. Delete a member interface: Click to delete all member interface from an interface group. Or select the interfaces to be deleted in Selected and click to delete the interfaces from the interface group. Interfaces added to an ISP interface group are not displayed in Selectable. That is, one member interface can be bound to only one interface group.

   3. Click OK.
3. Configure a global routing policy.
   1. Click the Intelligent Uplink Selection Policy tab and click Edit in the Global Routing Policy area.

      In the Global Routing Policy area, you can choose whether to enable DNS Transparent Proxy. For configuration details, see Configuring DNS Transparent Proxy.

   2. Select a link selection mode from the Selection Mode drop-down list.
      

      After the link selection mode is configured, subsequent traffic that passes through the FW will be forwarded on the basis of link selection policies. For earlier traffic, the session is not aged. Therefore, such traffic is not immediately forwarded on the basis of link selection policies. You can run the reset firewall session table command to manually clear the session entry or wait until the session ages.

      The service will be interrupted after you clear the session entry. Therefore, exercise caution when you perform this operation. You can clear the session entry only after you confirm that services will not be affected.

      • Selection Mode is Load balancing based on link bandwidth.

        Parameter	Description
        Health Check	Indicate health check. Select a health check object from the drop-down list or click Add Health Check to create a health check object. You can choose Object > Health Check and click Add to create health check objects in advance. Link quality detection depends on the health check. If more intelligent route selection is required based on the link delay, jitter, and packet loss rate, you need to specify Health Check and Link Quality Indicator in the route selection policy. Referencing the health check on a route selection member interface can detect only the connectivity of the interface link.
        Link Quality Indicator	Indicate a link quality indicator. Select a link quality indicator from the drop-down list or click Add Link Quality Indicator to create a link quality indicator. You can choose Object > Link Quality Indicator and click Add to create link quality indicators in advance. Health Check and Link Quality Indicator should be configured at the same time. After Health Check and Link Quality Indicator are configured, the FW checks whether the link quality (delay, jitter, and packet loss rate) of the outbound interface meets the quality requirements of Link Quality Indicator in real time. Unqualified links are not allowed to participate in intelligent uplink selection. NOTE: If a member interface of intelligent uplink selection is not included in the outbound interfaces of the health check, the interface is not matched with the link quality indicators. That is, the interface is considered qualified by default.
        Sticky Session	Disable: disables the sticky session function. Source IP Address: enables the sticky session function based on source IP addresses. In this mode, traffic from one source IP address or network segment is forwarded through one outgoing interface. This mode applies to scenarios sensitive to link switching. Destination IP Address: enables the sticky session function based on destination IP addresses. In this mode, traffic to one destination IP address or network segment is forwarded through one outgoing interface. This mode applies to intelligent uplink selection scenarios based on link quality. Source IP & Destination IP Address: enables the sticky session function based on source and destination IP addresses. In this mode, traffic from one source IP address or network segment to one destination IP address or network segment is forwarded through one outgoing interface. This mode applies to scenarios where the traffic rate often reaches the interface bandwidth. Enabling the sticky session function in such a scenario has slight impacts on link load sharing calculation. With this function enabled, after traffic selects a link for the first time, the FW generates a corresponding sticky session entry. If the subsequent traffic matches the entry, the FW forwards the traffic through the outgoing interface recorded in the entry. In this manner, traffic of one user can be forwarded through one interface. NOTICE: After the sticky session function is disabled or the sticky session mode is changed, the FW immediately deletes all sticky session entries of the intelligent uplink selection policy, which may cause link switchover for some users. Therefore, exercise with caution.
        Source Subnet Mask Bits	This parameter must be configured when the sticky session mode is Source IP Address or Source IP & Destination IP Address. When the sticky session mode is Source IP Address, the FW creates a sticky session entry based on the source IP address, outgoing interface, and matched intelligent uplink selection policy ID in a session. If the source IP address of subsequent traffic matching the same intelligent uplink selection policy is in the same network segment as the source IP address recorded in the sticky session entry, the FW forwards the traffic through the outgoing interface in the entry. When the sticky session mode is Source IP & Destination IP Address, the FW creates a sticky session entry based on the source IP address, destination IP address, outgoing interface, and matched intelligent uplink selection policy ID in a session. If the source and destination IP addresses of subsequent traffic matching the same intelligent uplink selection policy are in the same network segment as the source and destination IP addresses recorded in the sticky session entry, the FW forwards the traffic through the outgoing interface in the entry. NOTICE: If the source subnet mask length is changed, the FW immediately deletes all sticky session entries of the intelligent uplink selection policy, which may cause link switchover for some users. Therefore, exercise with caution.
        Destination Subnet Mask Bits	This parameter must be configured when the sticky session mode is Destination IP Address or Source IP & Destination IP Address. When the sticky session mode is Destination IP Address, the FW creates a sticky session entry based on the destination IP address, outgoing interface, and matched intelligent uplink selection policy ID in a session. If the destination IP address of subsequent traffic matching the same intelligent uplink selection policy is in the same network segment as the destination IP address recorded in the sticky session entry, the FW forwards the traffic through the outgoing interface in the entry. When the sticky session mode is Source IP & Destination IP Address, the FW creates a sticky session entry based on the source IP address, destination IP address, outgoing interface, and matched intelligent uplink selection policy ID in a session. If the source and destination IP addresses of subsequent traffic matching the same intelligent uplink selection policy are in the same network segment as the source and destination IP addresses recorded in the sticky session entry, the FW forwards the traffic through the outgoing interface in the entry. NOTICE: If the destination subnet mask length is changed, the FW immediately deletes all sticky session entries of the intelligent uplink selection policy, which may cause link switchover for some users. Therefore, exercise with caution.
        WAN Interface/Carrier/Interface Group	Intelligent uplink selection member interface. After you click Add, you can select member interfaces from the drop-down list. The member interfaces can be single interfaces, common interface groups, and ISP interface groups. An interface group is a collection of one or more intelligent uplink selection member interfaces. Interface groups cannot be nested. That is, multiple interface groups cannot form a new interface group.
        Overload Protection Threshold	Bandwidth usage of the link. This parameter is unavailable here. It must be configured when you configure the interface. For details, see 1.
        Incoming	Inbound overload protection threshold. This parameter is unavailable here. It must be configured when you configure the interface. For details, see 1.
        Outgoing	Outbound overload protection threshold. This parameter is unavailable here. It must be configured when you configure the interface. For details, see 1.

      • Selection Mode is Load balancing based on link quality.

        Parameter	Description
        Link quality indicators	When you set the link selection mode to load balancing by link quality, you can set one or more link quality parameters to evaluate the link quality. The FW supports three link quality parameters: Packet loss ratio: Packet loss ratio is the default link quality parameter. After sending multiple probe packets, the FW counts the number of dropped packets and calculates the packet loss ratio. The packet loss ratio is the number of reply packets divided by the number of probe packets. Packet loss ratio is a decisive parameter to evaluate link quality. Delay: Subtracting the probe sending time from the reply receiving time is the delay. The average delay of the N probe packets sent by the FW is the final delay. Jitter: The absolute value of the difference between two adjacent probe delays is jitter. The average jitter of the N probe packets sent by the FW is the final jitter.
        Detection Times	Number of link quality detection times.
        Detection Interval	Interval at which link quality detection is performed.
        Destination Subnet Mask Bits	Mask length of link quality detection.
        Sticky Session	Disable: disables the sticky session function. Source IP Address: enables the sticky session function based on source IP addresses. In this mode, traffic from one source IP address or network segment is forwarded through one outgoing interface. This mode applies to scenarios sensitive to link switching. Destination IP Address: enables the sticky session function based on destination IP addresses. In this mode, traffic to one destination IP address or network segment is forwarded through one outgoing interface. This mode applies to intelligent uplink selection scenarios based on link quality. Source IP & Destination IP Address: enables the sticky session function based on source and destination IP addresses. In this mode, traffic from one source IP address or network segment to one destination IP address or network segment is forwarded through one outgoing interface. This mode applies to scenarios where the traffic rate often reaches the interface bandwidth. Enabling the sticky session function in such a scenario has slight impacts on link load sharing calculation. With this function enabled, after traffic selects a link for the first time, the FW generates a corresponding sticky session entry. If the subsequent traffic matches the entry, the FW forwards the traffic through the outgoing interface recorded in the entry. In this manner, traffic of one user can be forwarded through one interface. NOTICE: After the sticky session function is disabled or the sticky session mode is changed, the FW immediately deletes all sticky session entries of the intelligent uplink selection policy, which may cause link switchover for some users. Therefore, exercise with caution.
        Source Subnet Mask Bits	This parameter must be configured when the sticky session mode is Source IP Address or Source IP & Destination IP Address. When the sticky session mode is Source IP Address, the FW creates a sticky session entry based on the source IP address, outgoing interface, and matched intelligent uplink selection policy ID in a session. If the source IP address of subsequent traffic matching the same intelligent uplink selection policy is in the same network segment as the source IP address recorded in the sticky session entry, the FW forwards the traffic through the outgoing interface in the entry. When the sticky session mode is Source IP & Destination IP Address, the FW creates a sticky session entry based on the source IP address, destination IP address, outgoing interface, and matched intelligent uplink selection policy ID in a session. If the source and destination IP addresses of subsequent traffic matching the same intelligent uplink selection policy are in the same network segment as the source and destination IP addresses recorded in the sticky session entry, the FW forwards the traffic through the outgoing interface in the entry. NOTICE: If the source subnet mask length is changed, the FW immediately deletes all sticky session entries of the intelligent uplink selection policy, which may cause link switchover for some users. Therefore, exercise with caution.
        Destination Subnet Mask Bits	This parameter must be configured when the sticky session mode is Destination IP Address or Source IP & Destination IP Address. When the sticky session mode is Destination IP Address, the FW creates a sticky session entry based on the destination IP address, outgoing interface, and matched intelligent uplink selection policy ID in a session. If the destination IP address of subsequent traffic matching the same intelligent uplink selection policy is in the same network segment as the destination IP address recorded in the sticky session entry, the FW forwards the traffic through the outgoing interface in the entry. When the sticky session mode is Source IP & Destination IP Address, the FW creates a sticky session entry based on the source IP address, destination IP address, outgoing interface, and matched intelligent uplink selection policy ID in a session. If the source and destination IP addresses of subsequent traffic matching the same intelligent uplink selection policy are in the same network segment as the source and destination IP addresses recorded in the sticky session entry, the FW forwards the traffic through the outgoing interface in the entry. NOTICE: If the destination subnet mask length is changed, the FW immediately deletes all sticky session entries of the intelligent uplink selection policy, which may cause link switchover for some users. Therefore, exercise with caution.
        WAN Interface/Carrier/Interface Group	Intelligent uplink selection member interface. After you click Add, you can select member interfaces from the drop-down list. The member interfaces can be single interfaces, common interface groups, and ISP interface groups. An interface group is a collection of one or more intelligent uplink selection member interfaces. Interface groups cannot be nested. That is, multiple interface groups cannot form a new interface group.
        Overload Protection Threshold	Bandwidth usage of the link. This parameter is unavailable here. It must be configured when you configure the interface. For details, see 1.
        Incoming	Inbound overload protection threshold. This parameter is unavailable here. It must be configured when you configure the interface. For details, see 1.
        Outgoing	Outbound overload protection threshold. This parameter is unavailable here. It must be configured when you configure the interface. For details, see 1.

      • Selection Mode is Load balancing based on link weights.

        Parameter	Description
        Health Check	Indicate health check. Select a health check object from the drop-down list or click Add Health Check to create a health check object. You can choose Object > Health Check and click Add to create health check objects in advance. Link quality detection depends on the health check. If more intelligent route selection is required based on the link delay, jitter, and packet loss rate, you need to specify Health Check and Link Quality Indicator in the route selection policy. Referencing the health check on a route selection member interface can detect only the connectivity of the interface link.
        Link Quality Indicator	Indicate a link quality indicator. Select a link quality indicator from the drop-down list or click Add Link Quality Indicator to create a link quality indicator. You can choose Object > Link Quality Indicator and click Add to create link quality indicators in advance. Health Check and Link Quality Indicator should be configured at the same time. After Health Check and Link Quality Indicator are configured, the FW checks whether the link quality (delay, jitter, and packet loss rate) of the outbound interface meets the quality requirements of Link Quality Indicator in real time. Unqualified links are not allowed to participate in intelligent uplink selection. NOTE: If a member interface of intelligent uplink selection is not included in the outbound interfaces of the health check, the interface is not matched with the link quality indicators. That is, the interface is considered qualified by default.
        Sticky Session	Disable: disables the sticky session function. Source IP Address: enables the sticky session function based on source IP addresses. In this mode, traffic from one source IP address or network segment is forwarded through one outgoing interface. This mode applies to scenarios sensitive to link switching. Destination IP Address: enables the sticky session function based on destination IP addresses. In this mode, traffic to one destination IP address or network segment is forwarded through one outgoing interface. This mode applies to intelligent uplink selection scenarios based on link quality. Source IP & Destination IP Address: enables the sticky session function based on source and destination IP addresses. In this mode, traffic from one source IP address or network segment to one destination IP address or network segment is forwarded through one outgoing interface. This mode applies to scenarios where the traffic rate often reaches the interface bandwidth. Enabling the sticky session function in such a scenario has slight impacts on link load sharing calculation. With this function enabled, after traffic selects a link for the first time, the FW generates a corresponding sticky session entry. If the subsequent traffic matches the entry, the FW forwards the traffic through the outgoing interface recorded in the entry. In this manner, traffic of one user can be forwarded through one interface. NOTICE: After the sticky session function is disabled or the sticky session mode is changed, the FW immediately deletes all sticky session entries of the intelligent uplink selection policy, which may cause link switchover for some users. Therefore, exercise with caution.
        Source Subnet Mask Bits	This parameter must be configured when the sticky session mode is Source IP Address or Source IP & Destination IP Address. When the sticky session mode is Source IP Address, the FW creates a sticky session entry based on the source IP address, outgoing interface, and matched intelligent uplink selection policy ID in a session. If the source IP address of subsequent traffic matching the same intelligent uplink selection policy is in the same network segment as the source IP address recorded in the sticky session entry, the FW forwards the traffic through the outgoing interface in the entry. When the sticky session mode is Source IP & Destination IP Address, the FW creates a sticky session entry based on the source IP address, destination IP address, outgoing interface, and matched intelligent uplink selection policy ID in a session. If the source and destination IP addresses of subsequent traffic matching the same intelligent uplink selection policy are in the same network segment as the source and destination IP addresses recorded in the sticky session entry, the FW forwards the traffic through the outgoing interface in the entry. NOTICE: If the source subnet mask length is changed, the FW immediately deletes all sticky session entries of the intelligent uplink selection policy, which may cause link switchover for some users. Therefore, exercise with caution.
        Destination Subnet Mask Bits	This parameter must be configured when the sticky session mode is Destination IP Address or Source IP & Destination IP Address. When the sticky session mode is Destination IP Address, the FW creates a sticky session entry based on the destination IP address, outgoing interface, and matched intelligent uplink selection policy ID in a session. If the destination IP address of subsequent traffic matching the same intelligent uplink selection policy is in the same network segment as the destination IP address recorded in the sticky session entry, the FW forwards the traffic through the outgoing interface in the entry. When the sticky session mode is Source IP & Destination IP Address, the FW creates a sticky session entry based on the source IP address, destination IP address, outgoing interface, and matched intelligent uplink selection policy ID in a session. If the source and destination IP addresses of subsequent traffic matching the same intelligent uplink selection policy are in the same network segment as the source and destination IP addresses recorded in the sticky session entry, the FW forwards the traffic through the outgoing interface in the entry. NOTICE: If the destination subnet mask length is changed, the FW immediately deletes all sticky session entries of the intelligent uplink selection policy, which may cause link switchover for some users. Therefore, exercise with caution.
        WAN Interface/Carrier/Interface Group	Intelligent uplink selection member interface. After you click Add, you can select member interfaces from the drop-down list. The member interfaces can be single interfaces, common interface groups, and ISP interface groups. An interface group is a collection of one or more intelligent uplink selection member interfaces. Interface groups cannot be nested. That is, multiple interface groups cannot form a new interface group.
        Overload Protection Threshold	Bandwidth usage of the link. This parameter is unavailable here. It must be configured when you configure the interface. For details, see 1.
        Incoming	Inbound overload protection threshold. This parameter is unavailable here. It must be configured when you configure the interface. For details, see 1.
        Outgoing	Outbound overload protection threshold. This parameter is unavailable here. It must be configured when you configure the interface. For details, see 1.
        Weight	Weight of the member interface. In intelligent uplink selection, the FW forwards traffic to different links based on the link weight ratio. Therefore, the link with a larger weight forwards more traffic, and the link with a smaller weight forwards less traffic.

      • Selection Mode is Active/standby backup based on link priorities.

        Parameter	Description
        Health Check	Indicate health check. Select a health check object from the drop-down list or click Add Health Check to create a health check object. You can choose Object > Health Check and click Add to create health check objects in advance. Link quality detection depends on the health check. If more intelligent route selection is required based on the link delay, jitter, and packet loss rate, you need to specify Health Check and Link Quality Indicator in the route selection policy. Referencing the health check on a route selection member interface can detect only the connectivity of the interface link.
        Link Quality Indicator	Indicate a link quality indicator. Select a link quality indicator from the drop-down list or click Add Link Quality Indicator to create a link quality indicator. You can choose Object > Link Quality Indicator and click Add to create link quality indicators in advance. Health Check and Link Quality Indicator should be configured at the same time. After Health Check and Link Quality Indicator are configured, the FW checks whether the link quality (delay, jitter, and packet loss rate) of the outbound interface meets the quality requirements of Link Quality Indicator in real time. Unqualified links are not allowed to participate in intelligent uplink selection. NOTE: If a member interface of intelligent uplink selection is not included in the outbound interfaces of the health check, the interface is not matched with the link quality indicators. That is, the interface is considered qualified by default.
        Sticky Session	Disable: disables the sticky session function. Source IP Address: enables the sticky session function based on source IP addresses. In this mode, traffic from one source IP address or network segment is forwarded through one outgoing interface. This mode applies to scenarios sensitive to link switching. Destination IP Address: enables the sticky session function based on destination IP addresses. In this mode, traffic to one destination IP address or network segment is forwarded through one outgoing interface. This mode applies to intelligent uplink selection scenarios based on link quality. Source IP & Destination IP Address: enables the sticky session function based on source and destination IP addresses. In this mode, traffic from one source IP address or network segment to one destination IP address or network segment is forwarded through one outgoing interface. This mode applies to scenarios where the traffic rate often reaches the interface bandwidth. Enabling the sticky session function in such a scenario has slight impacts on link load sharing calculation. With this function enabled, after traffic selects a link for the first time, the FW generates a corresponding sticky session entry. If the subsequent traffic matches the entry, the FW forwards the traffic through the outgoing interface recorded in the entry. In this manner, traffic of one user can be forwarded through one interface. NOTICE: After the sticky session function is disabled or the sticky session mode is changed, the FW immediately deletes all sticky session entries of the intelligent uplink selection policy, which may cause link switchover for some users. Therefore, exercise with caution.
        Source Subnet Mask Bits	This parameter must be configured when the sticky session mode is Source IP Address or Source IP & Destination IP Address. When the sticky session mode is Source IP Address, the FW creates a sticky session entry based on the source IP address, outgoing interface, and matched intelligent uplink selection policy ID in a session. If the source IP address of subsequent traffic matching the same intelligent uplink selection policy is in the same network segment as the source IP address recorded in the sticky session entry, the FW forwards the traffic through the outgoing interface in the entry. When the sticky session mode is Source IP & Destination IP Address, the FW creates a sticky session entry based on the source IP address, destination IP address, outgoing interface, and matched intelligent uplink selection policy ID in a session. If the source and destination IP addresses of subsequent traffic matching the same intelligent uplink selection policy are in the same network segment as the source and destination IP addresses recorded in the sticky session entry, the FW forwards the traffic through the outgoing interface in the entry. NOTICE: If the source subnet mask length is changed, the FW immediately deletes all sticky session entries of the intelligent uplink selection policy, which may cause link switchover for some users. Therefore, exercise with caution.
        Destination Subnet Mask Bits	This parameter must be configured when the sticky session mode is Destination IP Address or Source IP & Destination IP Address. When the sticky session mode is Destination IP Address, the FW creates a sticky session entry based on the destination IP address, outgoing interface, and matched intelligent uplink selection policy ID in a session. If the destination IP address of subsequent traffic matching the same intelligent uplink selection policy is in the same network segment as the destination IP address recorded in the sticky session entry, the FW forwards the traffic through the outgoing interface in the entry. When the sticky session mode is Source IP & Destination IP Address, the FW creates a sticky session entry based on the source IP address, destination IP address, outgoing interface, and matched intelligent uplink selection policy ID in a session. If the source and destination IP addresses of subsequent traffic matching the same intelligent uplink selection policy are in the same network segment as the source and destination IP addresses recorded in the sticky session entry, the FW forwards the traffic through the outgoing interface in the entry. NOTICE: If the destination subnet mask length is changed, the FW immediately deletes all sticky session entries of the intelligent uplink selection policy, which may cause link switchover for some users. Therefore, exercise with caution.
        Standby interface automatic shutdown	After you enable this function, the status of all standby interfaces become Down. If the active interface is overloaded (interface overload protection must be configured) or becomes Down, the standby interface with the highest priority becomes Up, but all the other standby interfaces remain Down. When the active interface and the standby interface with the highest priority are both overloaded or become Down, the standby interface with the second highest priority becomes Up. NOTE: Do not enable this function if both an interface (Eth-trunk1) and a subinterface (Eth-trunk1.1) are configured as the standby interfaces and the priority of the subinterface is higher. Otherwise, both the interface and subinterface are to switch between the Up and Down states.
        WAN Interface/Carrier/Interface Group	Intelligent uplink selection member interface. After you click Add, you can select member interfaces from the drop-down list. The member interfaces can be single interfaces, common interface groups, and ISP interface groups. An interface group is a collection of one or more intelligent uplink selection member interfaces. Interface groups cannot be nested. That is, multiple interface groups cannot form a new interface group.
        Overload Protection Threshold	Bandwidth usage of the link. This parameter is unavailable here. It must be configured when you configure the interface. For details, see 1.
        Incoming	Inbound overload protection threshold. This parameter is unavailable here. It must be configured when you configure the interface. For details, see 1.
        Outgoing	Outbound overload protection threshold. This parameter is unavailable here. It must be configured when you configure the interface. For details, see 1.
        Priority	Priority of the member interface. A great priority value indicates a high priority.

   3. Click OK.

Follow-up Procedure

After the configuration is complete, view the interface link health status in the Global Routing Policy area ( indicates that the link is available, and indicates that the link is unavailable) and the traffic statistics in the last five minutes.

Upstream Traffic Percentage and Downstream Traffic Percentage indicate the percentage of the actual traffic on the interface to the interface bandwidth. The red vertical bar indicates the overload protection threshold of the interface.

Figure 1 Traffic Percentage

The traffic percentage is displayed only when the bandwidth is configured on the interface.

For logical interfaces, the FW web UI does not support the display of traffic statistics on the Dialer interface and Tunnel interface.

The default traffic statistics collection interval for logical interfaces is 5 minutes. That is, the statistics collection result is updated every 5 minutes. You can run the set flow-stat interval command to change the interval.