--- title: "Configuring a Redundant Satellite Connection - icom OS Routers" slug: "configuring-a-redundant-satellite-connection-en" status: "update" updated: 2026-09-15T14:45:41Z published: 2026-09-15T14:45:41Z canonical: "docs.insys-icom.com/configuring-a-redundant-satellite-connection-en" --- > ## Documentation Index > Fetch the complete documentation index at: https://docs.insys-icom.com/llms.txt > Use this file to discover all available pages before exploring further. # Configuring a Redundant Satellite Connection - icom OS Routers Various routers of INSYS icom provide the option to set up a redundant WAN connection to increase the availability. This Configuration Guide shows how to configure a redundant satellite connection. ## Situation An INSYS router has a primary WAN connection via mobile radio at a remote location. Occasional mobile network failures require a stable redundant WAN connection. In case of such a failure, the system shall switch to the satellite connection. When the mobile network is restored, it should be switched back to this. ## Solution It is prerequisite that you have access to the web interface of the router and the router has been commissioned for Internet access via LTE and a local LAN network at port 1.2 using the Startup Wizard. It is also assumed that the satellite router is connected to port 1.3 of the router. The Startup Wizard configures a LTE interface and a local LAN network for your router. You’ll now add an additional Internet connection (secondary WAN connection) and configure the connection check of the primary WAN connection. A WAN chain defines a WAN connection. It is the sequential arrangement of interfaces that defines the establishment of a WAN connection. > [!NOTE] > Please note for satellite connections via Starlink! > > If you are using Starlink, you will need to set the Starlink router to bypass mode. You can find more information on this in [this guide](/kb/docs/how-to-bring-your-plc-online-via-starlink). ![cg m3 sat fallback](https://docs.insys-icom.de/assets/cg_m3_sat_fallback.png) 1. Open the user interface of the router: [https://insys.icom](https://insys.icom) 2. Click on behind the IP network *net3* on the *Network* → *Interfaces* page to edit this IP network. - *Active*: - *Description*: WAN - *Mode*: WAN - start only in WAN chain - *Start DHCPv4 client*: > [!NOTE] > Please note! > > If the satellite router does not have a DHCP server, enter a free IP address in the address range of the satellite router under *Static IP addresses* instead. ![cg en m3 sat fallback 01](https://docs.insys-icom.de/assets/cg_en_m3_sat_fallback_01.png) 3. Click on SUBMIT. 4. Click on on the *Network* → *WAN / Internet* page to add a new WAN chain and enter a *Description*. ![cg en m3 sat fallback 02](https://docs.insys-icom.de/assets/cg_en_m3_sat_fallback_02.png) 5. Check the option *Limit lifetime*, enter a lifetime for this WAN chain and select under *WAN chain upon expiry* **wan1** as WAN chain. > [!NOTE] > Please note! > > The WAN chain for the redundant satellite connection will be disconnected after the lifetime has expired and the WAN chain **wan1** will be started, which is used to establish the connection to the normal LTE connection. 6. Click in the *Interfaces in WAN chain* section on and select above added IP network **net3**. 7. Select the option **Restart other WAN chain** under *Interface state offline* 8. Activate *Additional connection check*, select under *check type* **Ping**, enter under *Ping to* e. g. **www.insys-icom.com** and enter a *Connection check interval*. 9. Click on *MORE* and select the WAN chain **wan1** under *WAN chain on failure/offline*. 10. Click on SUBMIT. 11. Click on behind the WAN chain *wan1* on the *Network* → *WAN / Internet* page to edit this. ![cg en m3 sat fallback 03](https://docs.insys-icom.de/assets/cg_en_m3_sat_fallback_03.png) 12. Activate *Additional connection check*, select under *Connection check type* **Ping**, enter under *Ping to* e. g. **www.insys-icom.com** and enter a *Connection check interval*. 13. Click on *MORE* under *Interfaces in WAN chain*, select the option **Restart other WAN chain** under *Interface state offline* and select the WAN chain **wan2** under *WAN chain on failure/offline*. 14. Click on SUBMIT. 15. Click on the *Network* → *Firewall / NAT* page in the *IP filter* section on behind the OUTPUT rule *[Startup] DNS queries sent by the router - udp* and add above added WAN interface under *Output interface*. ![cg en m3 sat fallback 04](https://docs.insys-icom.de/assets/cg_en_m3_sat_fallback_04.png) 16. Click on SUBMIT. 17. Add the WAN interface to the output interfaces in the same way for the filter rules *[Startup] DNS queries sent by the router - tcp*, *[Startup] NTP queries sent by the router* and *[Startup] Traffic from local net into the WAN*, for which the interface *net3* is also specified as the output interface. ![cg en m3 sat fallback 05](https://docs.insys-icom.de/assets/cg_en_m3_sat_fallback_05.png) 18. Click on the *Network* → *Firewall / NAT* page in the the *Source NAT* section on behind the Masquerade rule *[Startup] Masquerading for WAN interface* and add above added WAN interface under *Output interface*. ![cg en m3 sat fallback 06](https://docs.insys-icom.de/assets/cg_en_m3_sat_fallback_06.png) 19. Click on SUBMIT. 20. Click on on the *Network* → *Routing* page in the *Static routes* section to add a new static route and enter a *Description*: ![cg en m3 sat fallback 07](https://docs.insys-icom.de/assets/cg_en_m3_sat_fallback_07.png) 21. Select the WAN interface **net3** specified above under *Interface* and **Default route** as *Route type*. 22. Select **dynamic - use received IP address** under *Gateway*. > [!NOTE] > Please note! > > If the satellite router does not have a DHCP server, enter the IP address of the satellite router as *Static IP address* instead 23. Click on SUBMIT. 24. Click on the *Ethernet* → *Ethernet* page on in the row of port *Ethernet 1.3* to edit it and select **net3** under *Network* . ![cg en m3 sat fallback 08](https://docs.insys-icom.de/assets/cg_en_m3_sat_fallback_08.png) 25. Click on SUBMIT. 26. Activate the profile with a click on ACTIVATE PROFILE . ## Result testing 1. Open the ![view dashboard outline](https://docs.insys-icom.de/assets/icons/view-dashboard-outline.png) *Status* → *Dashboard* page and observe the establishment of the WAN chain in the *WAN chain* section. 2. Disconnect the antenna used for the cellular Internet connection and wait for the connection check interval to verify that the WAN connection changes to the redundant satellite WAN connection. 3. Reconnect the antenna to verify that the WAN connection changes back to the normal cellular WAN connection after the lifetime of the redundant satellite WAN connection has expired. ## Troubleshooting - You can temporarily disable the IP filters for IPv4 on the *Network* → *Firewall / NAT* page in the *Settings IP filter* section to find out if incorrect filter settings are the cause of problems. - Observe on the ![view dashboard outline](https://docs.insys-icom.de/assets/icons/view-dashboard-outline.png) *Status* → *Log view* page which process might fail. - Common careless mistakes when configuring such an application are forgetting to set the IP network to *active* or to add a default route. Standard IP address: https://192.168.1.1; login depending on configuration; default for earlier firmware versions: *User name*: **insys**, *Password*: **icom**