Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Question on WAN Failover

    Scheduled Pinned Locked Moved Routing and Multi WAN
    24 Posts 4 Posters 3.7k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • S
      sstretchh
      last edited by

      Yeah I have been trying to rack my head on how to read that. In my screen shot, did I make OPT1 (FTTC)primary ?

      I want the OPT1 (FTTC) to be the primary WAN interface

      GW2-groups.JPG
      GW2-groups.JPG_thumb

      1 Reply Last reply Reply Quote 0
      • DerelictD
        Derelict LAYER 8 Netgate
        last edited by

        @sstretchh:

        Yeah I have been trying to rack my head on how to read that. In my screen shot, did I make OPT1 (FTTC)primary ?

        I want the OPT1 (FTTC) to be the primary WAN interface

        For that route to OPT1failoverWAN1

        Chattanooga, Tennessee, USA
        A comprehensive network diagram is worth 10,000 words and 15 conference calls.
        DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
        Do Not Chat For Help! NO_WAN_EGRESS(TM)

        1 Reply Last reply Reply Quote 0
        • S
          sstretchh
          last edited by

          You Lost me there, Where do i do that at ?

          This is what i have so far. At this point I want to make sure I am set up to Failover from OPT1 (FTTC) to WAN1.

          And if I understand what you said earlier it should auto fail back

          Attached is what I have done so far.

          GW2-groups.JPG_thumb
          GW2-groups.JPG
          FW-LAN-GW.JPG
          FW-LAN-GW.JPG_thumb

          1 Reply Last reply Reply Quote 0
          • DerelictD
            Derelict LAYER 8 Netgate
            last edited by

            Right there in the firewall rules.  Get rid of the second one. It will never be matched (it matches the same traffic as the rule above it so it will never be hit by matching traffic..)

            Chattanooga, Tennessee, USA
            A comprehensive network diagram is worth 10,000 words and 15 conference calls.
            DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
            Do Not Chat For Help! NO_WAN_EGRESS(TM)

            1 Reply Last reply Reply Quote 0
            • S
              sstretchh
              last edited by

              get ride of the WAN > OPT1 Rule ?

              FW-LAN-GW_d.JPG
              FW-LAN-GW_d.JPG_thumb

              1 Reply Last reply Reply Quote 0
              • DerelictD
                Derelict LAYER 8 Netgate
                last edited by

                Yes.  it is unnecessary and will never match any traffic.

                Chattanooga, Tennessee, USA
                A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                Do Not Chat For Help! NO_WAN_EGRESS(TM)

                1 Reply Last reply Reply Quote 0
                • C
                  chidgear
                  last edited by

                  ninjaneer, This worked for you? I'm Kind of stuck here (trying to do my first failover on pfsense), so I am guiding myself with your post (I'm not so good with Firewall/NAT rules when it comes to forward traffic). Please, if something worked for you, let us know.

                  1 Reply Last reply Reply Quote 0
                  • DerelictD
                    Derelict LAYER 8 Netgate
                    last edited by

                    I'm not so good with Firewall/NAT rules when it comes to forward traffic

                    You should probably figure that out before tackling more advanced topics like multi-wan and the policy routing it entails.

                    Chattanooga, Tennessee, USA
                    A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                    DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                    Do Not Chat For Help! NO_WAN_EGRESS(TM)

                    1 Reply Last reply Reply Quote 0
                    • C
                      chidgear
                      last edited by

                      Can you suggest me some topic(s)? I think I expressed myself in the wrong way, I meant, "I'm not so good with Firewall/NAT rules when it comes to forward traffic on pfSense, because I got lost very easily with the interface" (Too many options at once) I'm still searching on the forum and the documentation, but it gets confusing because, or only a few people are having the problems that I have, or maybe I'm looking on the wrong direction (I'm thinking this is the main reason…)

                      Thanks in advance!

                      1 Reply Last reply Reply Quote 0
                      • DerelictD
                        Derelict LAYER 8 Netgate
                        last edited by

                        https://doc.pfsense.org/index.php/Firewall_Rule_Basics

                        https://doc.pfsense.org/index.php/Firewall_Rule_Processing_Order

                        https://doc.pfsense.org/index.php/Firewall_Rule_Troubleshooting

                        https://doc.pfsense.org/index.php/How_can_I_forward_ports_with_pfSense

                        https://doc.pfsense.org/index.php/Port_Forward_Troubleshooting

                        Chattanooga, Tennessee, USA
                        A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                        DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                        Do Not Chat For Help! NO_WAN_EGRESS(TM)

                        1 Reply Last reply Reply Quote 0
                        • S
                          sstretchh
                          last edited by

                          @chidgear:

                          ninjaneer, This worked for you? I'm Kind of stuck here (trying to do my first failover on pfsense), so I am guiding myself with your post (I'm not so good with Firewall/NAT rules when it comes to forward traffic). Please, if something worked for you, let us know.

                          I understand your frustration, having the links to the DOC's don't help everyone. I am a visual learner so the DOCs are nice if you want to understand a setting but doesn't help explain exactly what goes where.

                          I used this link (below) in the beginning, but I didn't care about the load balancing part. Then I start this post and derelict posted and helped me out. In the end it worked for me. If OPT1 fails, it switchs to my WAN port. Once it detects the my OPT1 is up again it auto switches back.

                          https://forum.pfsense.org/index.php?topic=28121.0

                          1 Reply Last reply Reply Quote 0
                          • S
                            sstretchh
                            last edited by

                            childgear, if this helps you here are screenshots of my final configuration. I think with the groups I only needed the OPT1failoverWAN1 group, I don't think i needed to have the one that starts with WAN. Its still there because I was following instructions from another post and I believe its needed if you continue on to do the load balancing part

                            this guys youtube video is pretty good also, if you comment with questions he replies pretty fast

                            DUAL WAN ON PFSENSE 2
                            Youtube Video

                            Edited to add youtube link

                            FW-LAN.JPG
                            FW-LAN.JPG_thumb
                            gateawys.JPG
                            gateawys.JPG_thumb
                            groups.JPG
                            groups.JPG_thumb

                            1 Reply Last reply Reply Quote 0
                            • C
                              chidgear
                              last edited by

                              Thank you everyone!, I'll try this when the workload gets down, so I can use both links. If it worked, I'll be back with some kudos XD

                              1 Reply Last reply Reply Quote 0
                              • K
                                Knakkel
                                last edited by

                                Thanx everyone! As a newbie on pfSense this is most helpfull for me. For a couple of years i've been poking around with 2 wans and the right solution to shape traffic.
                                Recently i was pointed in the pfSense direction, and since that i've been reading and reading on how to implement it in my household. Like Derelict said; better read the manual before turning on the machine!

                                Again, thanx  ;)

                                1 Reply Last reply Reply Quote 0
                                • First post
                                  Last post
                                Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.