You're doing NAT behind the second box? In that case it'll work the same as anything else, capture traffic on WAN on one of the affected camera's IPs and see if it leaves WAN, if it gets any reply from the camera.

When you do load balancing with speedtest.net you'll end up with weird results because it recently changed to use multiple TCP sessions, but only one TCP connection at a time. With the type of load balancing setup you have, parts of the test will use each WAN, so it's normal to end up with results that either match only one or the other, or in some instances, that match neither (as part of the download test can use one WAN and part of it the other). Sounds like you're also expecting a single TCP connection to use the sum of your bandwidth, which is impossible as it must be tied to only one WAN.

It just depends on what you want to do. If you want to just load balance, you only need the load balance entry. If you want failover only, just make that one. If you want to do a mix of all three, then do all three. It isn't required to make all three, the howto just does that since sometimes people want to do all three.

Ah: I forgot to ask my question:Does anyone see anything wrong with my configuration, or does anyone have any suggestions I might try? Thanks! –jason

Ping from the web utility only works through wan 1 AFAIK. Are you running a squid/transparent? I had the same exact problem and shutdown squid and everything worked with no issues.

Should work fine. Just a matter of installing the openbgpd package and configuring it the way they require.

You have to prevent that before it gets to your firewall, your firewall can't stop that. On a wired network, your switch has to control that, on wireless, your access point.

@heper: when working with vlan's you'd only need 1 NIC for all vlan's …. but then you would need a layer2 switch behind the pfsense on the pfsense you can create as many vlan interfaces as you need Hi, I'm trying to setting up pfsense vlans which steps I need to do? Until now i create two vlans Interface VLAN tag Description rl1–----------2----------CASA  rl1------------3---------UFFICIO where rl1 in the lan interface (rl0 is wan interface) which is the next step (i'm using static ip)? Is the hp 1810-g suitable swich? Regards Ugo

Thanks for the response. The issue was running the transparent proxy on the pfsense box. We were running two proxies, disabled the pfsense transparent and it all works. :)

You are probably seeing some asymmetric routing there. Go to System > Advanced and find the option under there to bypass firewall rules for traffic on the same network. That should help. Also in the squid settings be sure to set the option to bypass the proxy for private/local networks.

@heper: figure out how OSPF package can help you with routing all traffic over interconnects and if fails over WAN Brilliant idea. I'll try that too. Once I get a working setup I'll share it here.

I love the internet. We had almost the EXACT same setup (firebox for default gw and an ASA for vpn termination). This saved me many, many hours of headaches. This option is the same in 1.2.3 as well BTW.

You're a really great, now works without problems. I replaced the single IP subnet with all the LAN and I think that works by any location. Thanks, but thank you very much for your cooperation. Known, but those of Virgil can not do like the others … hei hei ..