PEPLINK HANDBOOK

How to Prioritise a Primary WAN in a SpeedFusion Profile

Inside a SpeedFusion VPN profile, WAN Connection Priority controls which WAN connections carry the tunnel and in what order, separate from the general Outbound Policy that governs the rest of your traffic.

QUICK ANSWER

In the SpeedFusion profile, set your preferred WAN or WANs to Priority 1 and any backup WANs to Priority 2 or lower. WANs sharing the same priority number are bonded together. A lower-priority WAN only joins the tunnel once every higher-priority WAN is marked as fully down, not simply congested.

Method 1: Set WAN Connection Priority in the profile

Steps

  1. Go to Network > SpeedFusion (labelled VPN on some firmware versions) and open the profile connecting to your peer site or SpeedFusion Cloud.
  2. Under WAN Connection Priority, find the list of WAN connections available to that profile.
  3. Assign Priority 1 to the WAN or WANs you want carrying the tunnel under normal conditions.
  4. Assign Priority 2, or lower, to any WAN you want held in reserve.
  5. Save and apply the profile.
This is failover between tiers, not congestion-based overflow

Priority in a SpeedFusion profile is all-or-nothing failover between priority tiers. A lower-priority WAN activates only once every WAN in the tier above it is detected as fully down. It will not automatically add capacity just because the primary WAN is busy or running slow. If you need a WAN to join in when the primary is congested rather than fully down, the closest approximation today is a cut-off latency threshold on the secondary WAN, which comes with its own trade-off: set it too aggressively and the connection can flap in and out as latency crosses the threshold.

Method 2: Bonding WANs at the same priority

WAN connections given the same priority number are bonded together and share the tunnel's capacity using the profile's configured algorithm. If you want two connections combined rather than one held in reserve, give them the same priority number instead of ranking one above the other.

Method 3: Confirm behaviour on the connection detail page

After saving, the SpeedFusion connection detail page shows which WANs are actively contributing to the tunnel. Use this to confirm your priority and bonding setup is behaving as expected before relying on it in production, particularly if you are mixing connection types such as fixed-line, cellular and satellite in the same profile.

Common questions

Does this replace Outbound Policy?
No. Outbound Policy decides which WAN carries general traffic across the router. WAN Connection Priority decides which WANs carry a specific SpeedFusion tunnel. See our guide to basic WAN failover for the Outbound Policy side of this.
Can I make a WAN join only when the primary is congested, not down?
Not directly and reliably today. The closest workaround is a cut-off latency threshold on the secondary WAN, which suspends it based on latency rather than a true congestion-based overflow, and can cause flapping if set too aggressively.
Do all WANs in a profile need to be the same connection type?
No. You can mix fixed-line, cellular and satellite WANs within the same profile. Priority and bonding logic works the same way regardless of connection type.
PEPLINK HANDBOOK

Building a resilient SpeedFusion topology across multiple sites? Our engineering team can help you get the priority and bonding strategy right.

Need more in depth help? Looking to buy more devices?