Multi Wan Multi IP
-
Hello,
I have been using pfSense for a while now. Recently i have added a second ISP provider who provided a set of static IP address. ISP 1 and 2 has completely different set of IP/Subnet. I have setup MultiWan pfSense successfully and it seem to work for traffic going out of internal network. But we have some remote Desktop users who uses RDS Windows. They all have been assigned a static IP address from ISP 1 to log into their Virtual Desktop.
When ISP 1 goes down they cannot login to their Virtual desktops since multi wan has moved internet connection to ISP 2 subnet.My question is how can people use one IP address to connect to our network with multiple Internet from multiple ISP. Much like in data center where they have redundant internet but single IP for front end.
I hope this makes sense. -
Setup Dynamic DNS, and set the interface to your gateway group. They have your users use the dynamic dns address to connect via rdp. Make sure that you have port forwards setup for both WAN interfaces.
-
Ah I see! Makes total sense. Would this also work for other servers such as email, web etc to port forward 80, 443, 993 etc.?
-
You bet. Should work for just about everything.
-
Dynamic DNS seems to be working. But got one problem. If IP host within the same ISP goes down, dynamic DNS picks up next available IP no problem. But if the entire ISP 1 goes down, the IP address for ISP 2 does not seem to reach dynamic DNS, since pfSense>DynamicDNS>interface to monitor is set to WAN. Do i need to create another entry in DynamicDNS for OPT1 which is for ISP 2? Obviously it is DNS issue since both ISP 1 and 2 have completely diferent gateway and subnet.
-
You need 2 internet connections, a bgp session to both providers in multi homed setup.
Will cost a fair amount as only possible with leased lines not DSL products@symmcom:
My question is how can people use one IP address to connect to our network with multiple Internet from multiple ISP. Much like in data center where they have redundant internet but single IP for front end.
I hope this makes sense.