hi,

I wanted to configure my HAP AX3 with a second "WAN" for backup incase my firewall crashes!

I have the HAP AX3 Wan interface 1 as client to my ISP router and the remaining interfaces are on the bridge with the physical ports as well as with VLAN interfaces.

therefore I guess I would need to take the interface 2 off of the bridge to configure as a second backup failover WAN?

I was watching some youtuvbe videos and they all have the WAN Ips as Static? can the WAN IP's be dynamic DHCP clients?

can you help me with the configuration ?

It shows you skippped drawing class for years ...

therefore I guess I would need to take the interface 2 off of the bridge to configure as a second backup failover WAN?

Yep.

can the WAN IP's be dynamic DHCP clients?

DHCP clients to which DHCP server(s)?
It depends on how (EXACTLY) the router is setup, which kind of connection you have, etc., etc., the WAN IP is (usually) static and provided by the ISP (or it can be dynamic, still provided by the ISP), then the ISP may be doing NAT or be in pass-thorough mode ...

I never actually went to drawing class..

the DHCP server is currently the firewall.

the reason I want to create a second wan link on the router is in case the firewall ceashes.. Therefore I thought of the idea of connecting the Router directly to the ISP router as DHCP client on ethernet port 2 in case of firewall crash!

but thats the question can the “WAN” IP’s be Dynamic or for this failover scenario they need to be set as static requiring the statuc route to the gateways( firewall, isp router)?

Yep, but (to me) It makes little sense to use a DHCP server (that at this point needs to be on the ISP router to dynamically provide a single IP to the Ax3 that (I have to assume) is never disconnected and moved around, or connected differently.
I may be (actually am) old fashion, but any device that Is physically "static" (i.e. does not move) is better served by assigning to It a static address.
The device running the DHCP server has usually anyway its own static IP and the one running the DHCP client will receive always the same IP, or - in case your firewall Is also running a DHCP client on the connection to the ISP router, at the most one out of two depending on the boot order of the various devices involved.
Having an unneeded DHCP server and DHCP client running means two more things that can go wrong. (they won't, but you never know).
It would be different if (but you didn't provide the needed info) if the ISP modem Is in pass-through mode AND your connection used Dynamic IP's, in that case the needed IP(s) to establish connection are decided and provided by the ISP that may change them anytime and you would need some mechanism to update this info as soon as It Is changed.
So:
Q. Is it *needed* to use static IP's ?
A. It depends, but probably not.

A different question could be:
Q. Is It smart to use a Dynamic IP unless really-really needed?
A. NO.

EDIT:fixed a couple typos

Guru,

well noted!! I will just have to get into the Vodafone station and change the DHCP pool start or end so i can set all ISP facing interfaces as static without worrying about future conflicts.

that being said do you suggest those recursive methods as failover scenario as a few people are posting videos on youtube?

do you suggest those recursive methods as failover scenario as a few people are posting videos on youtube?

Hello.

Recursive methods in general are great, you can use them (but of course I don't know nothing about videos you did watch).
Just want to say it but probably you are aware - you have one ISP so any problems they will have = no internet connection. You "only" achieve a redundant network cable to the same provider, not a "real" WAN failover.