Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Dual Wan

    Scheduled Pinned Locked Moved Routing and Multi WAN
    4 Posts 3 Posters 1.6k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • K Offline
      kreyzie
      last edited by

      Hi … recently our co just applied for a new 30mb symmetric biz line...what i plan is as below

      Wan 1 -----------+                     +---- Users ( Wan 1 )
      4MB Sym             |                      |
                              +---- PFsense --+--- VOIP ( Wan 1 or 2 )
                              |                      |
      Wan 2 -----------+                     +---- Servers ( Wan 2 )
      30MB Sym

      Both users and server are on same subnet , same ip range..they are all working on same domain.. i just wan to seperate the users wan and the server wan...because we are hosting ftp , web , email , daily offiste backup , rdp and etc so the traffic is quite high... and we dont want the users internet connection on the same WAN with the server... but i cant figure out how to split them on different wan.. NAT doesnt seem like able to split from source to selected wan , neither do firewall rules.. can someone shed some light ?

      1 Reply Last reply Reply Quote 0
      • M Offline
        Metu69salemi
        last edited by

        Have you planned your internal subnetting?
        Like if you have servers in one area of subnet and dhcp is serving another area, then you can make "server-alias" where you put host-range of server ip's.

        I don't know if you're getting my point, but you can create rules with aliases, and those aliases should contain server's ip-addresses.

        1 Reply Last reply Reply Quote 0
        • H Offline
          heper
          last edited by

          Create an alias with all your server IPs.
          '
          Then create firewall rule like this on lan:
          Rule1:
          Source : alias
          Destination: any
          Gateway: wan1

          Rule2:
          Source: NOT alias
          Destination:any
          Gateway: wan2

          1 Reply Last reply Reply Quote 0
          • K Offline
            kreyzie
            last edited by

            aight thx guys… will give it a try.. thk you so much :D cheers!

            1 Reply Last reply Reply Quote 0
            • First post
              Last post
            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.