Solved!! [image: thumbs-up.jpg]

Static routes are as basic as they come, documentation isn't required since those who need to use static routing have to understand it, though it's covered in http://pfsense.org/book in good depth. Our static route fields have the same names as those in Zywall, not sure where the confusion is? Fill in the same values.

Thank you I cant believe I missed something so simple.

Let try 1 wan connect with pppoe and another is dhcp from your modem.

That's what I needed, thank you :)

Thanks, I did the exact same thing after I got everything configured. I had to incorporate some other voodoo because I was lazy and didn't move a server from one subnet to the other.  When I have time later this week I'm going to write out everything I did with screen shots for the benefit of other folks who need to do something similar.  I'm having a dual-WAN for home/office is probably more common that folks think, and using one router to leverage both deserves a FAQ or Wiki.

Nope, monitor IP is blank so it's using the gateway address. I made sure I selected the correct WAN interface when sending the pings and even tried from the command line using the -I option to specify the source address and couldn't get a dropped packet at all. Very strange. It hasn't reoccurred yet so fingers crossed.

@heper: set pingable public ip's as monitor address for example google's dns servers 8.8.8.8 or 8.8.4.4 Thanks ! It worked. I cannot ping from "Diagnostics :Ping" page internal ISP addresses (that I got with a traceroute command). I can ping only gateway IP address for both WAN and WAN2 interfaces. Eric

i didn't actually do anything … glad to be of service anyways :D

Update: You can't have VIP working with Dynamic WAN addresses. AFAIK

I tought about one thing… is that possible that the "firewall" is acting on the IPTV Interface?  if so, how can I disable it on that interface and leave it only on the Internet Wan PPPoE Interface?

Routing over an ipsec tunnel won't work. What you can do is make a ipsec tunnel in transport mode and put a GRE tunnel on top, then you can route whatever you want.

Yes, i wondering if this is possible with pfsense without any other device.

Show us the interface configuration. Is the gateway online ? Can you ping from the Pfsense to some device on the internet? (ping.com) Do you have valid dns configuration for WAN3 ? ….??