Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Pfsence 1.2.3 RC1 with Double WAN ISP providers - wan failover/balance

    Scheduled Pinned Locked Moved OpenVPN
    13 Posts 4 Posters 4.6k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • M
      mst
      last edited by

      Deers,

      I have 2 COmcast connection with dynamic IP's. Is there any way to do WAN/Balance fail-over with 2 WAN dynamic ISPs?

      Additionaly, I would like to use OPEN VPN to another PFSence. Here is diagram

      Comcast–-dynamicIP---WAN1-----
                                                    |
                                                    |  PFSENCE 1.2.3 RC1  -----------openVPN-----------------PFSence1.2.3 RC1
      Comcast---dynamicIP---WAN2-----

      Is there any good easy guide for that scenario?

      Thank You

      1 Reply Last reply Reply Quote 0
      • Cry HavokC
        Cry Havok
        last edited by

        There are many guides if you read the documentation, though I seem to recall you need to have different default gateways for fail-over to work.

        Oh, and you really should upgrade to 1.2.3 release - there's no reason to still be using the first release candidate.

        1 Reply Last reply Reply Quote 0
        • M
          mst
          last edited by

          when upgrading from 1.2.3RC1 to 1.2.3RELEASE my DHCP dissappeared …. had to setup from CLI again.

          1 Reply Last reply Reply Quote 0
          • M
            mst
            last edited by

            looks like it does not work after reading the book and two tutorials….

            ![load balancer.jpg](/public/imported_attachments/1/load balancer.jpg)
            ![load balancer.jpg_thumb](/public/imported_attachments/1/load balancer.jpg_thumb)
            out-nat.jpg
            out-nat.jpg_thumb
            rules.jpg
            rules.jpg_thumb

            1 Reply Last reply Reply Quote 0
            • M
              mst
              last edited by

              when I unplugged WAN2 load balancer status showed all UP and could only ping some IPS, could not open www so DNS was somehow disabled.

              Sticky Connection enabled and dns forwarders like below

              dnsforwarde.jpg
              dnsforwarde.jpg_thumb

              1 Reply Last reply Reply Quote 0
              • P
                Perry
                last edited by

                you need to have different default gateways for fail-over to work

                do you have that?
                If you haven't already then use 8.8.8.8 and 8.8.4.4 as your DNS servers

                /Perry
                doc.pfsense.org

                1 Reply Last reply Reply Quote 0
                • M
                  mst
                  last edited by

                  8.8.8.8 and 8.8.4.4 were used as main DNS'es

                  1 Reply Last reply Reply Quote 0
                  • ?
                    Guest
                    last edited by

                    You should not be using sticky with outbound load balancing.  Disable this.

                    1 Reply Last reply Reply Quote 0
                    • M
                      mst
                      last edited by

                      OK I will disable it and test it…..

                      Thank You

                      1 Reply Last reply Reply Quote 0
                      • M
                        mst
                        last edited by

                        It looks like it did the trick.

                        WAN fail-over 2 ISP's (Comcast)  works. The only load balance I believe is not working correctly. I set it as in guide for 1.2.x. and  they looks like ….

                        From my understanding if I open two www pages one should go through WAN1 and the other one through WAN2 - right? If yes then both go through the same WAN1 interface.

                        Please advice

                        ![load-status balancer.jpg](/public/imported_attachments/1/load-status balancer.jpg)
                        ![load-status balancer.jpg_thumb](/public/imported_attachments/1/load-status balancer.jpg_thumb)
                        ![firewall rulles.jpg](/public/imported_attachments/1/firewall rulles.jpg)
                        ![firewall rulles.jpg_thumb](/public/imported_attachments/1/firewall rulles.jpg_thumb)

                        1 Reply Last reply Reply Quote 0
                        • M
                          mst
                          last edited by

                          is load balance working in 1.2.3 release ?

                          Looks like this is the only problem at this time …..

                          please advice

                          1 Reply Last reply Reply Quote 0
                          • ?
                            Guest
                            last edited by

                            Load balancing, both inbound and outbound works perfectly in 1.2.3.

                            1 Reply Last reply Reply Quote 0
                            • M
                              mst
                              last edited by

                              then I had to screw it up something …..

                              1 Reply Last reply Reply Quote 0
                              • First post
                                Last post
                              Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.