Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Can't ping from opt1

    Scheduled Pinned Locked Moved Routing and Multi WAN
    20 Posts 2 Posters 6.5k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • S
      simpi
      last edited by

      i cannot use 1st hope isp gateway as monitor becoz its dynamic it changes
      and do use the balancing pool in the firewall rule on  LAN as gateway

      1 Reply Last reply Reply Quote 0
      • GruensFroeschliG
        GruensFroeschli
        last edited by

        @simpi:

        i cannot use 1st hope isp gateway as monitor becoz its dynamic it changes

        This cannot be.
        Otherwise your modem would lose connectivity whenever your ISP moves the IP of the gateway.
        Can you show the two traces from a computer directly connected to the modems?

        Can you show a screenshot of your LAN-firewallrules?

        We do what we must, because we can.

        Asking questions the smart way: http://www.catb.org/esr/faqs/smart-questions.html

        1 Reply Last reply Reply Quote 0
        • S
          simpi
          last edited by

          gateway changes whenever i disconnect and reconnect internet i can't stay connected 24hrs isp reset connections after 24 hrs ….i post firewall rules soon

          1 Reply Last reply Reply Quote 0
          • S
            simpi
            last edited by

            firewall rules pic

            rules.JPG
            rules.JPG_thumb

            1 Reply Last reply Reply Quote 0
            • GruensFroeschliG
              GruensFroeschli
              last edited by

              gateway changes whenever i disconnect and reconnect internet i can't stay connected 24hrs isp reset connections after 24 hrs

              Now that is a hell of a strange ISP…
              You could do a traceroute everytime you have a different IP/gateway and see from which point on you always take the same route.
              Then use this IP as monitoring-IP. (Since it's always reachabel over the same way no matter what gateway you have)

              @http://forum.pfsense.org/index.php/topic:

              Rules:
              Rules are processed from top to down.
              If a rule catches the rest of the rules is no longer considered.
              Per default a "block all" rule is always in place (invisible below your own rules).

              Traffic is filtered on the Interface on which traffic comes in.
              So traffic comming in on the LAN-Interface will only be processed by the rules you define on the LAN tab.

              Your second rule is never doing anything :)

              We do what we must, because we can.

              Asking questions the smart way: http://www.catb.org/esr/faqs/smart-questions.html

              1 Reply Last reply Reply Quote 0
              • S
                simpi
                last edited by

                Now that is a hell of a strange ISP

                yes bcoz i m from india

                (Since it's always reachabel over the same way no matter what gateway you have)

                wht u say has point but i need add static route whichever ip need to reach beyond adsl modem tht means i need to change routes whenever gateway changes

                1 Reply Last reply Reply Quote 0
                • GruensFroeschliG
                  GruensFroeschli
                  last edited by

                  pfSense automatically creates static routes to the correct gateway for the monitor IP's.

                  We do what we must, because we can.

                  Asking questions the smart way: http://www.catb.org/esr/faqs/smart-questions.html

                  1 Reply Last reply Reply Quote 0
                  • S
                    simpi
                    last edited by

                    you don't get my point . i mean to say is i can't reach any public ip from wan1 interface without adding static route manually in pfsense thats the prob

                    1 Reply Last reply Reply Quote 0
                    • GruensFroeschliG
                      GruensFroeschli
                      last edited by

                      Then reread this again and think about it ;)

                      @http://forum.pfsense.org/index.php/topic:

                      Rules:
                      Rules are processed from top to down.
                      If a rule catches the rest of the rules is no longer considered.
                      Per default a "block all" rule is always in place (invisible below your own rules).

                      Traffic is filtered on the Interface on which traffic comes in.
                      So traffic comming in on the LAN-Interface will only be processed by the rules you define on the LAN tab.

                      Your second rule is never doing anything :)

                      Your first rule (which is NOT loadbalancing) always catches.

                      We do what we must, because we can.

                      Asking questions the smart way: http://www.catb.org/esr/faqs/smart-questions.html

                      1 Reply Last reply Reply Quote 0
                      • S
                        simpi
                        last edited by

                        if i make load balancing the first rule internet stop working  i don't mean stop working u can say like if i open a webpage i need to refresh page 2 times before it opens

                        1 Reply Last reply Reply Quote 0
                        • GruensFroeschliG
                          GruensFroeschli
                          last edited by

                          What do you use as DNS server?

                          We do what we must, because we can.

                          Asking questions the smart way: http://www.catb.org/esr/faqs/smart-questions.html

                          1 Reply Last reply Reply Quote 0
                          • S
                            simpi
                            last edited by

                            i use open dns servers

                            1 Reply Last reply Reply Quote 0
                            • GruensFroeschliG
                              GruensFroeschli
                              last edited by

                              On the clients directly or on the pfSense?

                              If it's on the pfSense you need to create a static route for one of the DNS-entries to the second WAN.
                              Otherwise pfSense cannot resolve any DNS-requests while the primary WAN is down.

                              We do what we must, because we can.

                              Asking questions the smart way: http://www.catb.org/esr/faqs/smart-questions.html

                              1 Reply Last reply Reply Quote 0
                              • S
                                simpi
                                last edited by

                                thank u very much for ur support i finally solved the prob

                                wht i did reinstalled pfsense and now i m monitoring next hop isp gateway as u said and added a static route
                                for dns server on opt interface load balancing is working fine thank u once again

                                1 Reply Last reply Reply Quote 0
                                • First post
                                  Last post
                                Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.