← ALL POSTS
NETWORKS & INFRASTRUCTURE EXPLAINER

Failover internet: stay online when your ISP isn’t

When the internet goes down at a small business, the register stops taking cards, the phones go quiet, and the cloud software everyone lives in becomes a spinning wheel. For a retail shop or a busy office, an outage is not an inconvenience, it is the whole business standing still. Failover internet fixes this: a second connection that takes over automatically when the primary one dies. It is one of the cheapest pieces of insurance in IT, and most businesses that need it do not have it.

The basic setup: dual-WAN

The heart of a failover setup is a dual-WAN router. WAN is just the port where your internet connection plugs in, and dual-WAN means the router has two of them. Your main ISP goes into port one, your backup connection goes into port two, and the router watches the primary connection constantly. When it stops responding, the router shifts all traffic to the backup, usually within seconds. Your staff may notice a brief hiccup. They will not notice an outage.

Plenty of business-grade gear does this out of the box: Ubiquiti, Peplink, Cisco Meraki, Fortinet, and others. If you already own a business firewall, there is a decent chance it has a second WAN port sitting unused. The ISP-provided router almost never does this well, which is one more reason we replace those.

What to use as the backup line

The backup should fail differently than the primary. If both connections are cable internet from the same provider entering the building through the same conduit, one backhoe takes out both. Your options, roughly in order of popularity:

Failover and failback, automatically

The word "automatic" is doing the heavy lifting here. A backup connection that requires someone to unplug one cable and plug in another is not failover, it is a scavenger hunt during an emergency. The router should detect the outage by pinging a reliable target, switch over on its own, and then switch back (failback) once the primary is healthy again for a sustained period, not the instant it flickers back to life. Flapping back and forth during an unstable outage is worse than staying on backup, so a good configuration waits a few minutes of stable primary before failing back.

One configuration detail that bites people: make sure the router checks actual internet reachability, not just whether the cable has link. A cable modem can show a solid green light while the connection behind it is dead. Ping something out on the internet, not the modem.

What stays up, and what to expect

On a cellular backup, plan around the fact that it is slower and sometimes metered. The things that matter most keep working fine:

What you may want to hold back: big file syncs, video calls for the whole office, and streaming. Better routers let you set rules so that during failover, payments and phones get priority and the break-room smart TV gets nothing.

What it costs

A capable dual-WAN router runs a few hundred dollars if you do not already own one. The cellular plan is typically tens of dollars a month. Against that, price one outage: a retail location doing a few thousand dollars a day in card sales loses real money every hour the terminal is down, and that is before you count staff standing around and customers walking out. The setup usually pays for itself the first time it fires.

Test it, then test it again

A failover setup you have never tested is a hope, not a plan. When it is installed, unplug the primary WAN cable and watch what happens. Run a card transaction on backup. Make a phone call on backup. Plug the primary back in and confirm traffic fails back on its own. Then put a reminder on the calendar and do the same test quarterly, because firmware updates and ISP changes have a way of quietly breaking things. The whole test takes ten minutes. If it passes, you can stop thinking about internet outages, which is the entire point.

Stuck on this, or want it done for you? That's the job.

Email us →
RELATED READING
Set up a pfSense firewall for a small office Step-By-Step Guide
Switches and routers: what each box actually does Explainer
Business Wi-Fi that reaches the back office Explainer
Cat6, fiber, and doing cable runs right the first time Explainer
Cameras and access control on your own network Explainer
NO FORMS. JUST EMAIL.
mason@hurbs.io
or (832) 457-4317, LA and Houston