Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Can't ping from opt1

    Scheduled Pinned Locked Moved Routing and Multi WAN
    20 Posts 2 Posters 6.5k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • GruensFroeschliG
      GruensFroeschli
      last edited by

      @simpi:

      i cannot use 1st hope isp gateway as monitor becoz its dynamic it changes

      This cannot be.
      Otherwise your modem would lose connectivity whenever your ISP moves the IP of the gateway.
      Can you show the two traces from a computer directly connected to the modems?

      Can you show a screenshot of your LAN-firewallrules?

      We do what we must, because we can.

      Asking questions the smart way: http://www.catb.org/esr/faqs/smart-questions.html

      1 Reply Last reply Reply Quote 0
      • S
        simpi
        last edited by

        gateway changes whenever i disconnect and reconnect internet i can't stay connected 24hrs isp reset connections after 24 hrs ….i post firewall rules soon

        1 Reply Last reply Reply Quote 0
        • S
          simpi
          last edited by

          firewall rules pic

          rules.JPG
          rules.JPG_thumb

          1 Reply Last reply Reply Quote 0
          • GruensFroeschliG
            GruensFroeschli
            last edited by

            gateway changes whenever i disconnect and reconnect internet i can't stay connected 24hrs isp reset connections after 24 hrs

            Now that is a hell of a strange ISP…
            You could do a traceroute everytime you have a different IP/gateway and see from which point on you always take the same route.
            Then use this IP as monitoring-IP. (Since it's always reachabel over the same way no matter what gateway you have)

            @http://forum.pfsense.org/index.php/topic:

            Rules:
            Rules are processed from top to down.
            If a rule catches the rest of the rules is no longer considered.
            Per default a "block all" rule is always in place (invisible below your own rules).

            Traffic is filtered on the Interface on which traffic comes in.
            So traffic comming in on the LAN-Interface will only be processed by the rules you define on the LAN tab.

            Your second rule is never doing anything :)

            We do what we must, because we can.

            Asking questions the smart way: http://www.catb.org/esr/faqs/smart-questions.html

            1 Reply Last reply Reply Quote 0
            • S
              simpi
              last edited by

              Now that is a hell of a strange ISP

              yes bcoz i m from india

              (Since it's always reachabel over the same way no matter what gateway you have)

              wht u say has point but i need add static route whichever ip need to reach beyond adsl modem tht means i need to change routes whenever gateway changes

              1 Reply Last reply Reply Quote 0
              • GruensFroeschliG
                GruensFroeschli
                last edited by

                pfSense automatically creates static routes to the correct gateway for the monitor IP's.

                We do what we must, because we can.

                Asking questions the smart way: http://www.catb.org/esr/faqs/smart-questions.html

                1 Reply Last reply Reply Quote 0
                • S
                  simpi
                  last edited by

                  you don't get my point . i mean to say is i can't reach any public ip from wan1 interface without adding static route manually in pfsense thats the prob

                  1 Reply Last reply Reply Quote 0
                  • GruensFroeschliG
                    GruensFroeschli
                    last edited by

                    Then reread this again and think about it ;)

                    @http://forum.pfsense.org/index.php/topic:

                    Rules:
                    Rules are processed from top to down.
                    If a rule catches the rest of the rules is no longer considered.
                    Per default a "block all" rule is always in place (invisible below your own rules).

                    Traffic is filtered on the Interface on which traffic comes in.
                    So traffic comming in on the LAN-Interface will only be processed by the rules you define on the LAN tab.

                    Your second rule is never doing anything :)

                    Your first rule (which is NOT loadbalancing) always catches.

                    We do what we must, because we can.

                    Asking questions the smart way: http://www.catb.org/esr/faqs/smart-questions.html

                    1 Reply Last reply Reply Quote 0
                    • S
                      simpi
                      last edited by

                      if i make load balancing the first rule internet stop working  i don't mean stop working u can say like if i open a webpage i need to refresh page 2 times before it opens

                      1 Reply Last reply Reply Quote 0
                      • GruensFroeschliG
                        GruensFroeschli
                        last edited by

                        What do you use as DNS server?

                        We do what we must, because we can.

                        Asking questions the smart way: http://www.catb.org/esr/faqs/smart-questions.html

                        1 Reply Last reply Reply Quote 0
                        • S
                          simpi
                          last edited by

                          i use open dns servers

                          1 Reply Last reply Reply Quote 0
                          • GruensFroeschliG
                            GruensFroeschli
                            last edited by

                            On the clients directly or on the pfSense?

                            If it's on the pfSense you need to create a static route for one of the DNS-entries to the second WAN.
                            Otherwise pfSense cannot resolve any DNS-requests while the primary WAN is down.

                            We do what we must, because we can.

                            Asking questions the smart way: http://www.catb.org/esr/faqs/smart-questions.html

                            1 Reply Last reply Reply Quote 0
                            • S
                              simpi
                              last edited by

                              thank u very much for ur support i finally solved the prob

                              wht i did reinstalled pfsense and now i m monitoring next hop isp gateway as u said and added a static route
                              for dns server on opt interface load balancing is working fine thank u once again

                              1 Reply Last reply Reply Quote 0
                              • First post
                                Last post
                              Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.