Load balancing and multi lan config

[GruensFroeschli]

What perry wrote is not about traffic from the clients.
This is purely for DNS requests from the pfSense to the DNS server(s) of your ISP.
(To allow pfSense to resolve names even if one WAN is down).

[Megastar]

i was talking about the link he provide in example. I already done this for dns. But i still can't have load balancing on lan1 AND lan2. Lan1 can do it, lan2 use only wan… When wan fall, lan2 can go out with wan2.  Is there someone who success having load balancing on various lan ?

[GruensFroeschli]

Yes. I have it running.

Can you provide screenshots of:
interface-status-page
LB-config-page
LB-pool-status-page
firewall-rules LAN1, LAN2
config-page WAN1, WAN2
NAT-rules
AoN-rule

maybe it's something small which just is missconfigured.

[Megastar]

Ok here we go !

For wan and wan2 config, both have static public IP. Both wan use the same provider, so dns are the same for both connections.

[Megastar]

the last screenshots :

[GruensFroeschli]

You say the two WANs are from the same ISP.
Are they per chance in the same subnet? (aka they have the same gateway?).

The screenshots look good.
Actually they look exactly the same as in my setup with different IPs.

[Megastar]

They are not in the same subnet, each have different public ip with different gateway. Only dns are equals. Which version do you use ? 1.2.2 or 1.2.3 RC1 ? I'm with 1.2.3 RC1 and maybe it's just a bug on this version…

[GruensFroeschli]

I'm running 1.2.2.

[Megastar]

Thanks for your help  ;) ! I will try to reinstall in 1.2.2 version and test this !

[Megastar]

Well, i have the same problem with 1.2.2 and config like describe above… Very strange... I really don't understand why it won't work. If you look at lan2rules.jpg i posted above, i can't even ping 192.168.90.1 (which is pfsense interface address on lan2) from my client 192.168.90.10 .   In order to do this, and to access internet, i have to change gateway field in the rule from loadbalance to default. But in this case, no load balancing anymore, just primary wan is used to go outside.  Really odd...

Edit : Did you modify something special in system:static route ? Maybe i miss a thing here...

[Eugene]

@Megastar:

i can't even ping 192.168.90.1 (which is pfsense interface address on lan2) from my client 192.168.90.10 .   In order to do this, and to access internet, i have to change gateway field in the rule from loadbalance to default. But in this case, no load balancing anymore, just primary wan is used to go outside.  Really odd…

It's is not odd it's normal. Just insert one rule before the last one "allow icmp from LAN2net to 192.168.90.1 using 'default' gateway" and you will be able to ping it.