Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Can't ping from opt1

    Scheduled Pinned Locked Moved Routing and Multi WAN
    20 Posts 2 Posters 6.5k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • GruensFroeschliG
      GruensFroeschli
      last edited by

      Is the WAN2 in the balancing-pool status offline?
      What do you use as monitor-IP?

      We do what we must, because we can.

      Asking questions the smart way: http://www.catb.org/esr/faqs/smart-questions.html

      1 Reply Last reply Reply Quote 0
      • S
        simpi
        last edited by

        it is always online be coz i monitor gateway

        1 Reply Last reply Reply Quote 0
        • GruensFroeschliG
          GruensFroeschli
          last edited by

          Is the gateway on the ISP's side?
          Since it's a private IP i suppose not.
          Use the first hop on the ISP's side as monitor IP.

          Did you actually use the balancing pool in the firewall rule on your LAN as gateway?

          We do what we must, because we can.

          Asking questions the smart way: http://www.catb.org/esr/faqs/smart-questions.html

          1 Reply Last reply Reply Quote 0
          • S
            simpi
            last edited by

            i cannot use 1st hope isp gateway as monitor becoz its dynamic it changes
            and do use the balancing pool in the firewall rule on  LAN as gateway

            1 Reply Last reply Reply Quote 0
            • GruensFroeschliG
              GruensFroeschli
              last edited by

              @simpi:

              i cannot use 1st hope isp gateway as monitor becoz its dynamic it changes

              This cannot be.
              Otherwise your modem would lose connectivity whenever your ISP moves the IP of the gateway.
              Can you show the two traces from a computer directly connected to the modems?

              Can you show a screenshot of your LAN-firewallrules?

              We do what we must, because we can.

              Asking questions the smart way: http://www.catb.org/esr/faqs/smart-questions.html

              1 Reply Last reply Reply Quote 0
              • S
                simpi
                last edited by

                gateway changes whenever i disconnect and reconnect internet i can't stay connected 24hrs isp reset connections after 24 hrs ….i post firewall rules soon

                1 Reply Last reply Reply Quote 0
                • S
                  simpi
                  last edited by

                  firewall rules pic

                  rules.JPG
                  rules.JPG_thumb

                  1 Reply Last reply Reply Quote 0
                  • GruensFroeschliG
                    GruensFroeschli
                    last edited by

                    gateway changes whenever i disconnect and reconnect internet i can't stay connected 24hrs isp reset connections after 24 hrs

                    Now that is a hell of a strange ISP…
                    You could do a traceroute everytime you have a different IP/gateway and see from which point on you always take the same route.
                    Then use this IP as monitoring-IP. (Since it's always reachabel over the same way no matter what gateway you have)

                    @http://forum.pfsense.org/index.php/topic:

                    Rules:
                    Rules are processed from top to down.
                    If a rule catches the rest of the rules is no longer considered.
                    Per default a "block all" rule is always in place (invisible below your own rules).

                    Traffic is filtered on the Interface on which traffic comes in.
                    So traffic comming in on the LAN-Interface will only be processed by the rules you define on the LAN tab.

                    Your second rule is never doing anything :)

                    We do what we must, because we can.

                    Asking questions the smart way: http://www.catb.org/esr/faqs/smart-questions.html

                    1 Reply Last reply Reply Quote 0
                    • S
                      simpi
                      last edited by

                      Now that is a hell of a strange ISP

                      yes bcoz i m from india

                      (Since it's always reachabel over the same way no matter what gateway you have)

                      wht u say has point but i need add static route whichever ip need to reach beyond adsl modem tht means i need to change routes whenever gateway changes

                      1 Reply Last reply Reply Quote 0
                      • GruensFroeschliG
                        GruensFroeschli
                        last edited by

                        pfSense automatically creates static routes to the correct gateway for the monitor IP's.

                        We do what we must, because we can.

                        Asking questions the smart way: http://www.catb.org/esr/faqs/smart-questions.html

                        1 Reply Last reply Reply Quote 0
                        • S
                          simpi
                          last edited by

                          you don't get my point . i mean to say is i can't reach any public ip from wan1 interface without adding static route manually in pfsense thats the prob

                          1 Reply Last reply Reply Quote 0
                          • GruensFroeschliG
                            GruensFroeschli
                            last edited by

                            Then reread this again and think about it ;)

                            @http://forum.pfsense.org/index.php/topic:

                            Rules:
                            Rules are processed from top to down.
                            If a rule catches the rest of the rules is no longer considered.
                            Per default a "block all" rule is always in place (invisible below your own rules).

                            Traffic is filtered on the Interface on which traffic comes in.
                            So traffic comming in on the LAN-Interface will only be processed by the rules you define on the LAN tab.

                            Your second rule is never doing anything :)

                            Your first rule (which is NOT loadbalancing) always catches.

                            We do what we must, because we can.

                            Asking questions the smart way: http://www.catb.org/esr/faqs/smart-questions.html

                            1 Reply Last reply Reply Quote 0
                            • S
                              simpi
                              last edited by

                              if i make load balancing the first rule internet stop working  i don't mean stop working u can say like if i open a webpage i need to refresh page 2 times before it opens

                              1 Reply Last reply Reply Quote 0
                              • GruensFroeschliG
                                GruensFroeschli
                                last edited by

                                What do you use as DNS server?

                                We do what we must, because we can.

                                Asking questions the smart way: http://www.catb.org/esr/faqs/smart-questions.html

                                1 Reply Last reply Reply Quote 0
                                • S
                                  simpi
                                  last edited by

                                  i use open dns servers

                                  1 Reply Last reply Reply Quote 0
                                  • GruensFroeschliG
                                    GruensFroeschli
                                    last edited by

                                    On the clients directly or on the pfSense?

                                    If it's on the pfSense you need to create a static route for one of the DNS-entries to the second WAN.
                                    Otherwise pfSense cannot resolve any DNS-requests while the primary WAN is down.

                                    We do what we must, because we can.

                                    Asking questions the smart way: http://www.catb.org/esr/faqs/smart-questions.html

                                    1 Reply Last reply Reply Quote 0
                                    • S
                                      simpi
                                      last edited by

                                      thank u very much for ur support i finally solved the prob

                                      wht i did reinstalled pfsense and now i m monitoring next hop isp gateway as u said and added a static route
                                      for dns server on opt interface load balancing is working fine thank u once again

                                      1 Reply Last reply Reply Quote 0
                                      • First post
                                        Last post
                                      Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.