Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    5 WAN on 3 Interface. How?

    Scheduled Pinned Locked Moved Routing and Multi WAN
    26 Posts 3 Posters 2.8k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • B
      befree2
      last edited by

      First of all, many thanks @virgomann and @johnpoz for answering me and giving me great solutions
      I am not very familiar with Vlan but I will make it.
      I will use one port on pfsense while on the switch (vlan support) I will use 3 ports.
      Just long enough to find a suitable switch, I believe the netgear gs308t should go and I'll let you know.
      In the meantime, many many thanks

      1 Reply Last reply Reply Quote 0
      • B
        befree2
        last edited by

        26290c6e-cbe1-4456-a3e9-f84e5f782972-immagine.png

        I'm starting to see how to configure interfaces. So is that correct?

        V 1 Reply Last reply Reply Quote 0
        • V
          viragomann @befree2
          last edited by

          @befree2
          Yes, the VLANs are ok.
          But some cheap switches cannot properly separate networks, when running tagged and untagged traffic on the same port. So you should better also turn the existing TIM1 on em3 network port into a VLAN.

          B johnpozJ 2 Replies Last reply Reply Quote 0
          • B
            befree2 @viragomann
            last edited by

            @viragomann
            Ok I will VLAN 4 TIM1

            1 Reply Last reply Reply Quote 0
            • johnpozJ
              johnpoz LAYER 8 Global Moderator @viragomann
              last edited by johnpoz

              @viragomann said in 5 WAN on 3 Interface. How?:

              when running tagged and untagged traffic on the same port.

              What switch is this - tplink has had issues with vlans for sure, not able to remove vlan 1 in the past.

              But in all my years in networking have never seen an issue where you couldn't run a native vlan, ie untagged along with tagged vlans. Now you can only run 1 untagged vlan that is for sure. But you should be able to run 1 untagged vlan with other tagged vlans.

              But in such a setup I would prob just run them all tagged. I don't see any advantage of running a native vlan in such a setup.

              But sure if he had say a 5 port switch he could run run some of his wan into pfsense native, and then run the extra ones into a switch and tagg the traffic into 1 pfsense interface, etc.

              Personally if was me, I would just get a better router with more interfaces ;) But if couldn't do that and I had to do such a setup.. I would do it as drawn with the lagg and the vlans over the lagg. This gives you most through put to any of the wan routers..

              I really don't understand such a setup - I could see 2 wan, or maybe even 3 in ultimate failover sort of setup.. But I am curious to why anyone would want/need 5 different wan providers.. My "guess" is providers don't have away to bring in the bandwidth required on 1 line.. So have to have multiple lines.. If that is the case, then lagg on pfsense gives highest possible physical interface bandwidth that could be shared across the 5 wan connections.. So in theory you could hit 3gig.. Assuming that is the pfsense wan interfaces are gig ;)

              An intelligent man is sometimes forced to be drunk to spend time with his fools
              If you get confused: Listen to the Music Play
              Please don't Chat/PM me for help, unless mod related
              SG-4860 24.11 | Lab VMs 2.8, 24.11

              B 1 Reply Last reply Reply Quote 0
              • B
                befree2 @johnpoz
                last edited by

                @johnpoz
                Hi,
                first of all thank you for you help.
                So, if Im not wrong I will setup pfsense as follow:

                em3 interface should be turn in lagg mode with the 3 vlans
                and the netgear gs-308t seems to be the right one
                https://www.netgear.it/support/product/gs308t.aspx
                Once I get the switch at home I will setting up with untagged and tagged port ,
                I will keep you informed if you don't mind.
                Bye
                Roberto

                johnpozJ B 2 Replies Last reply Reply Quote 0
                • johnpozJ
                  johnpoz LAYER 8 Global Moderator @befree2
                  last edited by johnpoz

                  @befree2 said in 5 WAN on 3 Interface. How?:

                  https://www.netgear.it/support/product/gs308t.aspx

                  Yeah that will do vlans and lagg, but for a lagg you need more than just 1 interface..

                  https://docs.netgate.com/pfsense/en/latest/interfaces/lagg.html

                  If your just going to use 1 interface, then no lagg would be setup and you would just setup vlans on it.

                  An intelligent man is sometimes forced to be drunk to spend time with his fools
                  If you get confused: Listen to the Music Play
                  Please don't Chat/PM me for help, unless mod related
                  SG-4860 24.11 | Lab VMs 2.8, 24.11

                  B 1 Reply Last reply Reply Quote 0
                  • B
                    befree2 @johnpoz
                    last edited by

                    @johnpoz
                    Good morning. Ok, I will do it with no LAGG at the moment.
                    Thank you very much

                    1 Reply Last reply Reply Quote 0
                    • B
                      befree2 @befree2
                      last edited by befree2

                      Hi,
                      everything is working fine now!!!
                      Here is the scenario after the Vlan were created

                      90df7754-d863-4bd5-8595-275aa5e16baf-immagine.png

                      458b9321-7211-4fa0-ac6e-90e60a7ad2a2-immagine.png

                      I did not create a LAGG because the switch they gave me doesn't support. That's why the LAGG port is still available.
                      Thank you everyone for supporting me.

                      Bye
                      Roberto

                      johnpozJ 1 Reply Last reply Reply Quote 0
                      • johnpozJ
                        johnpoz LAYER 8 Global Moderator @befree2
                        last edited by johnpoz

                        @befree2 said in 5 WAN on 3 Interface. How?:

                        the switch they gave me doesn't support.

                        And what switch is that? You said you were getting a gs308T which clearly supports lag per its manual

                        https://www.downloads.netgear.com/files/GDC/GS308T/GS308T_GS310TP_IG_EN.pdf

                        lag.jpg

                        From what you posted - you have your vlans on a lag - with what 1 port? If your not going to use lag I would remove putting your vlans on it.. And just put the vlans on em3..

                        An intelligent man is sometimes forced to be drunk to spend time with his fools
                        If you get confused: Listen to the Music Play
                        Please don't Chat/PM me for help, unless mod related
                        SG-4860 24.11 | Lab VMs 2.8, 24.11

                        1 Reply Last reply Reply Quote 0
                        • B
                          befree2
                          last edited by

                          Hi.
                          I know but the client provide a GS108E .....

                          johnpozJ B 2 Replies Last reply Reply Quote 0
                          • johnpozJ
                            johnpoz LAYER 8 Global Moderator @befree2
                            last edited by

                            @befree2 well if the total bandwidth available from these 5 connections is less than gig - still seems crazy to me then it not really a problem.

                            Out of pure curiosity - why do they have 5 connections? Is there limit on what 1 connection can provide in form of bandwidth?

                            An intelligent man is sometimes forced to be drunk to spend time with his fools
                            If you get confused: Listen to the Music Play
                            Please don't Chat/PM me for help, unless mod related
                            SG-4860 24.11 | Lab VMs 2.8, 24.11

                            1 Reply Last reply Reply Quote 0
                            • B
                              befree2 @befree2
                              last edited by

                              @befree2
                              Yes there is. ISP cannot provide a single connectivity and that's why we join all routers..
                              On pfsense I have set LOAD BALANCE to get more bandwidth and fail over as well

                              1 Reply Last reply Reply Quote 0
                              • B
                                befree2
                                last edited by befree2

                                Hi.
                                I got the GS308T Switch !!
                                What Should I create first the LAG o Vlan? I'would like to set port 1to 6 as Vlan3,4,5,6,7 and 8.
                                What LAGG ports to pfsense assuming that port 8 should be connected to PFsense wan port?
                                I'm struggling with that. Hope you can help.
                                In case we can use teamviewer ...
                                Thanks

                                Robin

                                0206d03c-7fa4-4692-9415-2fbfd57a40d6-vlan.jpg

                                6b82a8d2-7df7-4460-8e00-390171ee6678-lag.jpg

                                4420d893-cfff-489f-8517-ca3ee374b4d2-lag.jpg

                                johnpozJ 1 Reply Last reply Reply Quote 0
                                • johnpozJ
                                  johnpoz LAYER 8 Global Moderator @befree2
                                  last edited by johnpoz

                                  @befree2 unless your total bandwidth from the internet lines is over 1 gig, I would just go with no lagg - lagg adds complexity. I am a huge fan of the KISS principle (Keep it Simple Stupid) hehehe

                                  Thought you said it was working with your other switch that didn't do lagg? Were you not seeing the full bandwidth your different isp lines can provide?

                                  https://en.wikipedia.org/wiki/KISS_principle

                                  Maybe because it originated in the Navy, and I'm ex-navy.. That was a bit before my time ;) but was still a saying when I was in during the 80s and 90s

                                  An intelligent man is sometimes forced to be drunk to spend time with his fools
                                  If you get confused: Listen to the Music Play
                                  Please don't Chat/PM me for help, unless mod related
                                  SG-4860 24.11 | Lab VMs 2.8, 24.11

                                  B 1 Reply Last reply Reply Quote 1
                                  • B
                                    befree2 @johnpoz
                                    last edited by befree2

                                    @johnpoz
                                    Hi, thanks for replying me.
                                    Each router (5) provides about 40Mbit
                                    I got what you said.
                                    So, can I do it in this way:

                                    On pfsense
                                    2 ports LAGGtoLAN
                                    2 ports LAGGtoWAN

                                    On the VLAN switch
                                    2 ports for LAGGtoWAN (pfsense)
                                    ports 1to6 VLANid's....

                                    Tel me what you think please
                                    Robin

                                    johnpozJ 1 Reply Last reply Reply Quote 0
                                    • johnpozJ
                                      johnpoz LAYER 8 Global Moderator @befree2
                                      last edited by

                                      @befree2 said in 5 WAN on 3 Interface. How?:

                                      Each router (5) provides about 40Mbit

                                      Even if you had 10, for 400mbps total you have zero need of lagg.

                                      An intelligent man is sometimes forced to be drunk to spend time with his fools
                                      If you get confused: Listen to the Music Play
                                      Please don't Chat/PM me for help, unless mod related
                                      SG-4860 24.11 | Lab VMs 2.8, 24.11

                                      B 1 Reply Last reply Reply Quote 1
                                      • B
                                        befree2 @johnpoz
                                        last edited by

                                        @johnpoz
                                        Ok John, got it. Thanks
                                        I'll leave only the LAN side as LAGG

                                        Many many thanks for you time

                                        Robin

                                        johnpozJ 1 Reply Last reply Reply Quote 0
                                        • johnpozJ
                                          johnpoz LAYER 8 Global Moderator @befree2
                                          last edited by johnpoz

                                          @befree2 said in 5 WAN on 3 Interface. How?:

                                          I'll leave only the LAN side as LAGG

                                          You don't even need that.. Again KISS!!

                                          The only reason I ever mentioned lagg is if your total bandwidth from these 5 different lines exceeded 1gig, in that case you would need to allow for more than 1 gig into the lan side of pfsense via different interfaces.

                                          But since your total internet connection adding up all your 40mbps connections is 200mbps, 1gig connection is all you need, so there is no reason to setup lagg..

                                          An intelligent man is sometimes forced to be drunk to spend time with his fools
                                          If you get confused: Listen to the Music Play
                                          Please don't Chat/PM me for help, unless mod related
                                          SG-4860 24.11 | Lab VMs 2.8, 24.11

                                          B 1 Reply Last reply Reply Quote 0
                                          • B
                                            befree2 @johnpoz
                                            last edited by

                                            @johnpoz
                                            I've considered LAGG on the LAN side because of 200 to 300 concurrent users that require internet

                                            johnpozJ 1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.