Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    5 WAN on 3 Interface. How?

    Scheduled Pinned Locked Moved Routing and Multi WAN
    26 Posts 3 Posters 2.6k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • V
      viragomann @befree2
      last edited by

      @befree2
      Yes, the VLANs are ok.
      But some cheap switches cannot properly separate networks, when running tagged and untagged traffic on the same port. So you should better also turn the existing TIM1 on em3 network port into a VLAN.

      B johnpozJ 2 Replies Last reply Reply Quote 0
      • B
        befree2 @viragomann
        last edited by

        @viragomann
        Ok I will VLAN 4 TIM1

        1 Reply Last reply Reply Quote 0
        • johnpozJ
          johnpoz LAYER 8 Global Moderator @viragomann
          last edited by johnpoz

          @viragomann said in 5 WAN on 3 Interface. How?:

          when running tagged and untagged traffic on the same port.

          What switch is this - tplink has had issues with vlans for sure, not able to remove vlan 1 in the past.

          But in all my years in networking have never seen an issue where you couldn't run a native vlan, ie untagged along with tagged vlans. Now you can only run 1 untagged vlan that is for sure. But you should be able to run 1 untagged vlan with other tagged vlans.

          But in such a setup I would prob just run them all tagged. I don't see any advantage of running a native vlan in such a setup.

          But sure if he had say a 5 port switch he could run run some of his wan into pfsense native, and then run the extra ones into a switch and tagg the traffic into 1 pfsense interface, etc.

          Personally if was me, I would just get a better router with more interfaces ;) But if couldn't do that and I had to do such a setup.. I would do it as drawn with the lagg and the vlans over the lagg. This gives you most through put to any of the wan routers..

          I really don't understand such a setup - I could see 2 wan, or maybe even 3 in ultimate failover sort of setup.. But I am curious to why anyone would want/need 5 different wan providers.. My "guess" is providers don't have away to bring in the bandwidth required on 1 line.. So have to have multiple lines.. If that is the case, then lagg on pfsense gives highest possible physical interface bandwidth that could be shared across the 5 wan connections.. So in theory you could hit 3gig.. Assuming that is the pfsense wan interfaces are gig ;)

          An intelligent man is sometimes forced to be drunk to spend time with his fools
          If you get confused: Listen to the Music Play
          Please don't Chat/PM me for help, unless mod related
          SG-4860 24.11 | Lab VMs 2.8, 24.11

          B 1 Reply Last reply Reply Quote 0
          • B
            befree2 @johnpoz
            last edited by

            @johnpoz
            Hi,
            first of all thank you for you help.
            So, if Im not wrong I will setup pfsense as follow:

            em3 interface should be turn in lagg mode with the 3 vlans
            and the netgear gs-308t seems to be the right one
            https://www.netgear.it/support/product/gs308t.aspx
            Once I get the switch at home I will setting up with untagged and tagged port ,
            I will keep you informed if you don't mind.
            Bye
            Roberto

            johnpozJ B 2 Replies Last reply Reply Quote 0
            • johnpozJ
              johnpoz LAYER 8 Global Moderator @befree2
              last edited by johnpoz

              @befree2 said in 5 WAN on 3 Interface. How?:

              https://www.netgear.it/support/product/gs308t.aspx

              Yeah that will do vlans and lagg, but for a lagg you need more than just 1 interface..

              https://docs.netgate.com/pfsense/en/latest/interfaces/lagg.html

              If your just going to use 1 interface, then no lagg would be setup and you would just setup vlans on it.

              An intelligent man is sometimes forced to be drunk to spend time with his fools
              If you get confused: Listen to the Music Play
              Please don't Chat/PM me for help, unless mod related
              SG-4860 24.11 | Lab VMs 2.8, 24.11

              B 1 Reply Last reply Reply Quote 0
              • B
                befree2 @johnpoz
                last edited by

                @johnpoz
                Good morning. Ok, I will do it with no LAGG at the moment.
                Thank you very much

                1 Reply Last reply Reply Quote 0
                • B
                  befree2 @befree2
                  last edited by befree2

                  Hi,
                  everything is working fine now!!!
                  Here is the scenario after the Vlan were created

                  90df7754-d863-4bd5-8595-275aa5e16baf-immagine.png

                  458b9321-7211-4fa0-ac6e-90e60a7ad2a2-immagine.png

                  I did not create a LAGG because the switch they gave me doesn't support. That's why the LAGG port is still available.
                  Thank you everyone for supporting me.

                  Bye
                  Roberto

                  johnpozJ 1 Reply Last reply Reply Quote 0
                  • johnpozJ
                    johnpoz LAYER 8 Global Moderator @befree2
                    last edited by johnpoz

                    @befree2 said in 5 WAN on 3 Interface. How?:

                    the switch they gave me doesn't support.

                    And what switch is that? You said you were getting a gs308T which clearly supports lag per its manual

                    https://www.downloads.netgear.com/files/GDC/GS308T/GS308T_GS310TP_IG_EN.pdf

                    lag.jpg

                    From what you posted - you have your vlans on a lag - with what 1 port? If your not going to use lag I would remove putting your vlans on it.. And just put the vlans on em3..

                    An intelligent man is sometimes forced to be drunk to spend time with his fools
                    If you get confused: Listen to the Music Play
                    Please don't Chat/PM me for help, unless mod related
                    SG-4860 24.11 | Lab VMs 2.8, 24.11

                    1 Reply Last reply Reply Quote 0
                    • B
                      befree2
                      last edited by

                      Hi.
                      I know but the client provide a GS108E .....

                      johnpozJ B 2 Replies Last reply Reply Quote 0
                      • johnpozJ
                        johnpoz LAYER 8 Global Moderator @befree2
                        last edited by

                        @befree2 well if the total bandwidth available from these 5 connections is less than gig - still seems crazy to me then it not really a problem.

                        Out of pure curiosity - why do they have 5 connections? Is there limit on what 1 connection can provide in form of bandwidth?

                        An intelligent man is sometimes forced to be drunk to spend time with his fools
                        If you get confused: Listen to the Music Play
                        Please don't Chat/PM me for help, unless mod related
                        SG-4860 24.11 | Lab VMs 2.8, 24.11

                        1 Reply Last reply Reply Quote 0
                        • B
                          befree2 @befree2
                          last edited by

                          @befree2
                          Yes there is. ISP cannot provide a single connectivity and that's why we join all routers..
                          On pfsense I have set LOAD BALANCE to get more bandwidth and fail over as well

                          1 Reply Last reply Reply Quote 0
                          • B
                            befree2
                            last edited by befree2

                            Hi.
                            I got the GS308T Switch !!
                            What Should I create first the LAG o Vlan? I'would like to set port 1to 6 as Vlan3,4,5,6,7 and 8.
                            What LAGG ports to pfsense assuming that port 8 should be connected to PFsense wan port?
                            I'm struggling with that. Hope you can help.
                            In case we can use teamviewer ...
                            Thanks

                            Robin

                            0206d03c-7fa4-4692-9415-2fbfd57a40d6-vlan.jpg

                            6b82a8d2-7df7-4460-8e00-390171ee6678-lag.jpg

                            4420d893-cfff-489f-8517-ca3ee374b4d2-lag.jpg

                            johnpozJ 1 Reply Last reply Reply Quote 0
                            • johnpozJ
                              johnpoz LAYER 8 Global Moderator @befree2
                              last edited by johnpoz

                              @befree2 unless your total bandwidth from the internet lines is over 1 gig, I would just go with no lagg - lagg adds complexity. I am a huge fan of the KISS principle (Keep it Simple Stupid) hehehe

                              Thought you said it was working with your other switch that didn't do lagg? Were you not seeing the full bandwidth your different isp lines can provide?

                              https://en.wikipedia.org/wiki/KISS_principle

                              Maybe because it originated in the Navy, and I'm ex-navy.. That was a bit before my time ;) but was still a saying when I was in during the 80s and 90s

                              An intelligent man is sometimes forced to be drunk to spend time with his fools
                              If you get confused: Listen to the Music Play
                              Please don't Chat/PM me for help, unless mod related
                              SG-4860 24.11 | Lab VMs 2.8, 24.11

                              B 1 Reply Last reply Reply Quote 1
                              • B
                                befree2 @johnpoz
                                last edited by befree2

                                @johnpoz
                                Hi, thanks for replying me.
                                Each router (5) provides about 40Mbit
                                I got what you said.
                                So, can I do it in this way:

                                On pfsense
                                2 ports LAGGtoLAN
                                2 ports LAGGtoWAN

                                On the VLAN switch
                                2 ports for LAGGtoWAN (pfsense)
                                ports 1to6 VLANid's....

                                Tel me what you think please
                                Robin

                                johnpozJ 1 Reply Last reply Reply Quote 0
                                • johnpozJ
                                  johnpoz LAYER 8 Global Moderator @befree2
                                  last edited by

                                  @befree2 said in 5 WAN on 3 Interface. How?:

                                  Each router (5) provides about 40Mbit

                                  Even if you had 10, for 400mbps total you have zero need of lagg.

                                  An intelligent man is sometimes forced to be drunk to spend time with his fools
                                  If you get confused: Listen to the Music Play
                                  Please don't Chat/PM me for help, unless mod related
                                  SG-4860 24.11 | Lab VMs 2.8, 24.11

                                  B 1 Reply Last reply Reply Quote 1
                                  • B
                                    befree2 @johnpoz
                                    last edited by

                                    @johnpoz
                                    Ok John, got it. Thanks
                                    I'll leave only the LAN side as LAGG

                                    Many many thanks for you time

                                    Robin

                                    johnpozJ 1 Reply Last reply Reply Quote 0
                                    • johnpozJ
                                      johnpoz LAYER 8 Global Moderator @befree2
                                      last edited by johnpoz

                                      @befree2 said in 5 WAN on 3 Interface. How?:

                                      I'll leave only the LAN side as LAGG

                                      You don't even need that.. Again KISS!!

                                      The only reason I ever mentioned lagg is if your total bandwidth from these 5 different lines exceeded 1gig, in that case you would need to allow for more than 1 gig into the lan side of pfsense via different interfaces.

                                      But since your total internet connection adding up all your 40mbps connections is 200mbps, 1gig connection is all you need, so there is no reason to setup lagg..

                                      An intelligent man is sometimes forced to be drunk to spend time with his fools
                                      If you get confused: Listen to the Music Play
                                      Please don't Chat/PM me for help, unless mod related
                                      SG-4860 24.11 | Lab VMs 2.8, 24.11

                                      B 1 Reply Last reply Reply Quote 0
                                      • B
                                        befree2 @johnpoz
                                        last edited by

                                        @johnpoz
                                        I've considered LAGG on the LAN side because of 200 to 300 concurrent users that require internet

                                        johnpozJ 1 Reply Last reply Reply Quote 0
                                        • johnpozJ
                                          johnpoz LAYER 8 Global Moderator @befree2
                                          last edited by

                                          @befree2 said in 5 WAN on 3 Interface. How?:

                                          200 to 300 concurrent users that require internet

                                          But your internet is only 200mbps total across all your connections, so lagg provides nothing other than a possible problem to deal with..

                                          An intelligent man is sometimes forced to be drunk to spend time with his fools
                                          If you get confused: Listen to the Music Play
                                          Please don't Chat/PM me for help, unless mod related
                                          SG-4860 24.11 | Lab VMs 2.8, 24.11

                                          1 Reply Last reply Reply Quote 2
                                          • First post
                                            Last post
                                          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.