A backhoe cuts a fiber conduit under the street outside your office park, and thirty seconds later every screen in the building goes dead. The VoIP phones unregister. Your warehouse crew cannot print shipping labels. Your accounting team gets kicked out of NetSuite in the middle of payroll.
Running a 50-person or 150-person company on a single internet pipe is reckless. Ten years ago, dual-ISP setups were expensive enterprise toys that required complex Border Gateway Protocol (BGP) routing and dedicated network engineers. Today, modern firewalls handle multi-WAN routing out of the box, and secondary circuits cost a fraction of what they used to.
The problem is that most mid-market companies either ignore redundancy entirely or let a carrier sales rep sell them an overpriced, poorly configured backup line that fails the first time they actually need it.
The Real Economics of Internet Downtime
Most business owners look at their internet bill purely as an overhead expense. They look at a $150-a-month commercial cable bill, compare it to an $800-a-month dedicated fiber quote, and take the cheap option.
That is bad math.
Take an office with 60 employees. If your average loaded labor cost across the company is $45 an hour, one hour of total downtime costs you $2,700 in dead payroll alone. If the outage lasts four hours while a local utility crew splices glass in a ditch down the road, you just lost nearly $11,000 in wages. That does not count missed inbound sales calls, paused outbound shipments, missed customer support tickets, or the reputational hit of being unreachable for half a day.
Internet redundancy is not an operational expense you buy for speed. It is insurance. You are buying operational continuity so your business does not stall when a telecom provider has a routing failure in Chicago or a construction crew clips a wire in your parking lot.
Reviewing your telecom billing lines can expose where you are already leaking cash on legacy services that could fund a proper backup connection. The FCC guide to telephone bills breaks down many of the mystery surcharges that carriers pack into old contracts.
Dual-ISP Architecture: Two Ways to Build It
There are two standard ways to set up redundant internet for a commercial office or manufacturing facility: active/passive failover and active/active load balancing.
1. Active/Passive Failover In an active/passive setup, your primary connection carries 100% of your production traffic under normal operating conditions. Your secondary connection sits idle in standby mode.
Your edge firewall monitors the primary line by sending constant health checks (usually ICMP pings or DNS queries to public resolvers like 1.1.1.1 or 8.8.8.8). If the primary line stops responding for a set threshold (say, five consecutive missed pings over ten seconds), the firewall flips its default route to the backup line.
- The good: It is simple to configure, requires no special carrier routing, and works on entry-level commercial firewalls.
- The bad: You are paying for a secondary circuit that produces zero value 99% of the year. Failover usually takes 10 to 45 seconds, which drops active VoIP calls, kills video conferences, and resets active VPN sessions.
2. Active/Active with SD-WAN Software-Defined Wide Area Networking (SD-WAN) uses both internet connections simultaneously. Instead of leaving the backup line cold, your firewall or edge router measures latency, jitter, and packet loss across both circuits in real time.
The firewall routes traffic dynamically based on the application. It pushes latency-sensitive voice traffic over your clean Dedicated Internet Access (DIA) fiber line, while pushing heavy software updates, bulk file backups, and general web browsing over a cheaper commercial cable or 5G connection.
- The good: You use all the bandwidth you buy. If the primary circuit degrades or drops, traffic shifts in under a second without dropping live phone calls or video meetings.
- The bad: It requires a capable next-generation firewall, clean traffic-shaping rules, and proper configuration upfront.
Transport Options: Why Physical Diversity Matters
A redundant network setup is useless if both providers share the same physical point of failure. We have walked into server rooms where a company had two different internet providers, only to trace both lines back to the exact same utility conduit entering the basement. If a utility crew trenches through that single pipe, both of your connections die at the same instant.
When designing redundancy through our core IT infrastructure and telecommunications advisory work, we mix transport types:
Dedicated Internet Access (DIA) Fiber Fiber DIA provides symmetrical upload and download speeds, guaranteed throughput (Committed Information Rate), and strict carrier Service Level Agreements (SLAs) with four-hour mean-time-to-repair (MTTR) commitments. This should be your primary circuit. For most offices with 30 to 150 workers, a 200 Mbps to 500 Mbps symmetrical fiber line is plenty.
Business Broadband (Coaxial Cable) Cable internet is asymmetrical (for instance, 400 Mbps download and 35 Mbps upload) with no uptime guarantees. It is cheap consumer-grade infrastructure packaged for business use. It makes a poor primary connection for modern cloud-heavy businesses, but it is an inexpensive, high-bandwidth secondary circuit in an SD-WAN configuration.
Fixed Wireless and 5G Business Backup Commercial 5G and fixed wireless give you true physical path diversity. Because the signal travels over the air to a local cellular tower rather than through a trench in the street, it survives underground physical cuts. Speeds and latency depend on tower distance, which makes 5G ideal as an emergency backup for cloud systems rather than a primary transport.
Maintaining baseline security on all endpoints using CISA Secure Our World guidance is still mandatory, even when running over mobile or wireless backup pipes.
How Do You Know If Your Secondary Circuit Is Working Right Now?
You probably do not. Most companies set up a secondary connection, verify it once during installation, and never look at it again. Six months later, the carrier pushes a firmware update to the modem, the interface hangs, and the line goes dark. When the main fiber line finally gets cut a year later, the firewall tries to fail over to a dead circuit.
The only way to trust your redundancy is to test it on purpose. Pull the primary WAN cable out of the firewall on a Tuesday morning. See if your phones stay up. See if your cloud ERP keeps working. If things break, fix the routing rules while you are in control of the schedule rather than during an emergency.
Estimated Cost Breakdown
Costs depend on your building location and local carrier buildouts, but these ranges reflect what businesses typically see in Michigan and the broader Midwest market.
1. Monthly Circuit Costs - Primary Fiber DIA (200 Mbps to 1 Gbps symmetrical): $450 to $1,100 per month depending on buildout distance and contract terms. - Secondary Business Cable (300 Mbps download / 35 Mbps upload): $120 to $220 per month. - Secondary 5G Business Backup: $60 to $140 per month on pooled or metered data plans.
2. Hardware and Licensing Modern next-generation firewalls from vendors like Fortinet, Cisco Meraki, or Sophos handle basic SD-WAN policies without needing standalone hardware.
- Mid-Market Firewall Appliance (50 to 150 users): $1,400 to $3,200 upfront purchase price.
- Annual Security and Support Subscriptions: $600 to $1,600 per year.
3. Engineering and Setup Configuring dual-WAN policies, DNS failover, Quality of Service (QoS) rules, and testing usually takes 8 to 16 hours of engineering time.
To see how carrier contract negotiation fits into broader network costs, read our Detroit telecom buying guide.
Common Traps to Avoid
- Buying two brands that share the same local loop: Brand A might resell Brand B's last-mile fiber. Always ask for the underlying carrier and conduit path before signing.
- Forgetting about static IPs: When traffic fails over to your backup line, your public IP changes. If your team relies on hardcoded IP whitelisting for cloud tools, they will get locked out during an outage. Build dynamic DNS or cloud-managed VPN profiles into your plan.
- Overpaying for raw speed: Carrier reps love pushing 2 Gbps or 5 Gbps circuits. In our experience, an 80-person office running Microsoft 365, Zoom, and cloud ERP software rarely uses more than 150 Mbps of steady bandwidth. Stop buying unneeded speed and put that budget toward path diversity.
Practical Redundancy for Growing Companies
You do not need a massive enterprise IT budget to keep your business online during an outage. A clean fiber DIA primary circuit, an inexpensive secondary broadband or 5G line, and a properly configured firewall will give you 99.99% operational uptime.
Good Wolf Technology is a vendor-neutral technology advisor based in Rochester, Michigan. We are not a reseller and we are not an IT brokerage. We do not push carrier quotas or hardware brands.
Book a free 15-minute review with our team to look over your current telecom bills and circuit design. You can also explore our broader services or get in touch through our contact page. If you are scoping broader infrastructure overhauls or data readiness projects, our paid AI advisory assessments start at $2,500.
Frequently Asked Questions
Will dual internet stop my Zoom and VoIP calls from dropping during an outage? With basic active/passive failover, no. The 15 to 30 second route change will drop active real-time sessions. With an active/active SD-WAN setup, packet steering shifts the session to the secondary link almost instantly, usually preserving the live call.
Can I use a residential cable line as my business backup? Technically yes, but practically no. Residential contracts prohibit commercial use, do not offer static IPs, and place you at the lowest tier of carrier support when neighborhood nodes experience congestion.
Do I need BGP routing for dual ISPs? Not for standard outbound office traffic. Commercial firewalls handle dual-WAN load balancing and failover using health checks and SD-WAN rules without the cost and complexity of public BGP peering.
How often should we test internet failover? At least once a quarter. Schedule a five-minute window, unplug the primary WAN cable from your firewall, and confirm that staff can continue working on core cloud applications.
Sources
- Federal Communications Commission: Understanding Your Telephone Bill
- Cybersecurity and Infrastructure Security Agency: Secure Our World