Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    2 WAN - 2 LAN - Portforwarding

    Scheduled Pinned Locked Moved Routing and Multi WAN
    42 Posts 4 Posters 10.6k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • E
      endy66
      last edited by

      So after i have done a lot of testing, i think i have found the issue, but now i Need help to solve this, because i am not such familiar with pfsense at the Moment.

      The Problem, that occurs is the following: if my wan1 goes down, all Clients inside lan2 (which connects over wan2 to the Internet) are not able to go online. As pointed out in my testing, this seems a dns issue, so i have checked the dns Servers, which are assigned from my isp. If i go to Status -> Interfaces, the isp dns Servers from BOTH wan Connections are showed up on my wan1 Interface. my wan2 Interface does not have any dns Servers listed. Now i Need a way to assign the dns Servers from isp1 to my wan1 Connection, and the dns Servers from isp2 to my wan2 Connection, then i think the Connection from lan2 -> wan2 will work correctly, if it can take the assigned dns Server.

      But how to do that?

      Greetings

      1 Reply Last reply Reply Quote 0
      • G
        GSianos
        last edited by

        Andy,
        can you tell me exactly how connect LAN1 to WAN1 and LAN2 to WAN2?

        ITControl.gr
        Everything is possible

        1 Reply Last reply Reply Quote 0
        • E
          endy66
          last edited by

          I have added 2 more interfaces, then named them WAN2 and LAN2. On LAN1 i set the default gateway on the Lan Net to all Rule to WAN1. On the LAN2 i set the Lan2 Net to all Rule to WAN2. Is this not the correct way to achieve this seperate LAN-WAN connection?

          Greetings

          1 Reply Last reply Reply Quote 0
          • G
            GSianos
            last edited by

            Can you tell me step by step how to set on LAN2 the GW of WAN2 an the rule?

            ITControl.gr
            Everything is possible

            1 Reply Last reply Reply Quote 0
            • E
              endy66
              last edited by

              Yes for sure. Ok i go to:

              Firewall -> Rules -> LAN2

              and there i edited the "Default allow LAN2 to any Rule" and selected under Advanced Options -> Gateway my WAN2 Gateway.

              I have done the same for the LAN1 - WAN1.

              Now i go to System -> Routing and unchecked any default Gateways, so no Gateway is set as Default. Thats all what i have done. I think i missed much more Things do to?

              Greetings

              1 Reply Last reply Reply Quote 0
              • G
                GSianos
                last edited by

                thanks a lot man….its works perfect!!!! :D

                what is your problem exactly?

                ITControl.gr
                Everything is possible

                1 Reply Last reply Reply Quote 0
                • E
                  endy66
                  last edited by

                  No problem:). My issue is, if wan1 goes down (to test i have unplugged the lancable to wan1), lan2 can not resolve any dns names anymore, so no internet access. Can you test this on your setup?

                  Greetings

                  1 Reply Last reply Reply Quote 0
                  • G
                    GSianos
                    last edited by

                    I cant, cause my server is dedicated visualization.
                    but you cant. if you connect WAN1 to LAN1 and WAN2 to LAN2, LAN1 can not see the WAN2.

                    maybe you want third WAN (WAN3) as a fail-over for WAN1 and 2

                    ITControl.gr
                    Everything is possible

                    1 Reply Last reply Reply Quote 0
                    • E
                      endy66
                      last edited by

                      No you missunderstood:). I dont want Failover. If WAN1 goes down, then it is ok, that LAN1 is offline! But my Problem is, that if WAN1 goes down, also LAN2 has no Internet Connection, because there seems to be an issue with dns Resolution. If you unplug WAN1 on your pfsense, can you Access the Internet from LAN2?

                      Greetings

                      1 Reply Last reply Reply Quote 0
                      • G
                        GSianos
                        last edited by

                        is you wan1 checked as default?
                        in the System/Routing/Gateways

                        ITControl.gr
                        Everything is possible

                        1 Reply Last reply Reply Quote 0
                        • E
                          endy66
                          last edited by

                          No i havent set any gateway as default. Do you set a default gateway in your setup?

                          Greetings

                          1 Reply Last reply Reply Quote 0
                          • G
                            GSianos
                            last edited by

                            No.
                            i just tested. unchecked vlan that connect WAN1 in my vSphere to test and disable WAN2. but if i disable WAN1 all the VMs that connected in WAN2, go out from WAN1.
                            that is mean in somewhere is configured WAN1 as a primary.

                            You must tell us someone where or find myself  :P

                            ITControl.gr
                            Everything is possible

                            1 Reply Last reply Reply Quote 0
                            • G
                              GSianos
                              last edited by

                              Cause i dont see any help here, maybe our solutions is PfSense Dual WAN Failover Configuration.
                              im going to tested it…

                              ITControl.gr
                              Everything is possible

                              1 Reply Last reply Reply Quote 0
                              • E
                                endy66
                                last edited by

                                So if you disconnect WAN1, your WAN2 clients are also not able anymore to go online? I think there is a problem with dns resolution, because the dns servers are only listed on the WAN1 interface on Status -> Interfaces.

                                Greetings

                                1 Reply Last reply Reply Quote 0
                                • G
                                  GSianos
                                  last edited by

                                  hmmm…maybe...

                                  why no one answer us?

                                  ITControl.gr
                                  Everything is possible

                                  1 Reply Last reply Reply Quote 0
                                  • E
                                    endy66
                                    last edited by

                                    So you have exactly the same problem?

                                    1 Reply Last reply Reply Quote 0
                                    • G
                                      GSianos
                                      last edited by

                                      yes!!!

                                      ITControl.gr
                                      Everything is possible

                                      1 Reply Last reply Reply Quote 0
                                      • E
                                        endy66
                                        last edited by

                                        Is this really not possible with pfsense?

                                        Greetings

                                        1 Reply Last reply Reply Quote 0
                                        • E
                                          endy66
                                          last edited by

                                          @GSianos, do you have some news? I am on testing since 3 days, but no luck…

                                          Greetings

                                          1 Reply Last reply Reply Quote 0
                                          • G
                                            GSianos
                                            last edited by

                                            …me too...
                                            why no one answer us?????  :(

                                            ITControl.gr
                                            Everything is possible

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.