Can'n not access to the Internet

hoba

You have to use one DNS from each of your wans and add a static route through the appropriate WAN to this dns server. Otherwise you'll lose dns resolution if you unplug the first wan. This is covered somewhere at the forum already. If you need more details search for it ;)

johnnguyen

Oh, so I must config static route for any to DNS Server?

ex: I have DNS server is 200.200.200.200 ==> config is:
static routes to 200.200.200.200/32 with gateway 10.10.10.2

is it right?

jeroen234

so that is one dns server for 1 gatway
where is the route to the other dns server on the gateway ?

johnnguyen

so, how many DNS servers will be static route to that servers? right?

hoba

@johnnguyen:

Oh, so I must config static route for any to DNS Server?

ex: I have DNS server is 200.200.200.200 ==> config is:
static routes to 200.200.200.200/32 with gateway 10.10.10.2

is it right?

Example:
DNS1 sits at WAN1
DNS2 sits at OPTWAN

You don't need a Route to DNS1 as this is handled by the default route

But you need a static route on Interface OPTWAN to DNS2/32 through upstream gateway on OPTWAN.

johnnguyen

Thanks Hoba

johnnguyen

Hi Hoba, I want ask you:

Example: I have 3 lines for WAN
WAN 1: 192.168.1.10/24 GW: 192.168.1.1
WAN 2: 192.168.2.10/24 GW: 192.168.2.1
WAN 3: 192.168.3.10/24 GW: 192.168.3.1

and subnets:
10.10.10.0/24
10.10.11.0/24
….
10.10.19.0/24

Can I create 3 Balancer as follow?
Balancer 1: WAN 1 and WAN 2
Balancer 2: WAN 2 and WAN 3

and I want setup 10.10.10.0/24 -> 10.10.15.0/24 traffic to balancer 1 and other subnets to Balancer 2, can I perform this task?

thanks, JN

hoba

Sure, just set up the two pools and use each one as gateway in the firewallrule at the desired interface.

johnnguyen

so, for each subnet I just map it's gateway to balancer I want it traffic over?

thanks hoba

johnnguyen

One again I want ask you, because in system advanced is enable "static route filter", I saw this warning "This option only applies if you have defined one or more static routes. If it is enabled, traffic that enters and leaves through the same interface will not be checked by the firewall. This may be desirable in some situations where multiple subnets are connected to the same interface",

I want ask, Can I make traffic shapping for subnets?

johnnguyen

Because when using balancer with many WANs, traffic shapping can not perform, so I have this diagram

subnets ==> router (L3) ==>pfsense (shapping) ==> pfsense (Load Balance) ==> Multiwan

ex: at pfsense (Load Balance) I make Balancer 1, Balancer 2
subnets are 10.10.10.0/24, …..10.10.19.0/24.

Can I make 10.10.10.0/24, ... 10.10.14.0/24 pass over Balancer 1 and other subnets pass over Balancer 2?

If can, pls help me howto make?

Thanks

hoba

@johnnguyen:

Because when using balancer with many WANs, traffic shapping can not perform, so I have this diagram

subnets ==> router (L3) ==>pfsense (shapping) ==> pfsense (Load Balance) ==> Multiwan

ex: at pfsense (Load Balance) I make Balancer 1, Balancer 2
subnets are 10.10.10.0/24, …..10.10.19.0/24.

Can I make 10.10.10.0/24, ... 10.10.14.0/24 pass over Balancer 1 and other subnets pass over Balancer 2?

If can, pls help me howto make?

Thanks

Please see http://forum.pfsense.org/index.php/topic,1656.0.html why that configuration (one shaper between lan and wan balancer) won't work like expected.

johnnguyen

Thanks Hoba, I will try to test.