Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    2 pfSenses, 2 WAN and 1 Local Server

    Routing and Multi WAN
    2
    15
    1.2k
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • S
      sarmad
      last edited by sarmad

      What i am trying to solve is to find a way that i can access the LAN in place1 from place2 and vice versa and use internet1 just in place1 and internet2 just in place2.
      So the connection between two nanos just to pass the LANs packets to be more fast without need to pass the internets over the nanos.

      1 Reply Last reply Reply Quote 0
      • S
        sarmad
        last edited by

        If i put OPT1 interface in pfsense2 with ip from lan1 subnet and make routing will work?

        1 Reply Last reply Reply Quote 0
        • S
          sarmad
          last edited by

          I made the following:
          pfsense1 - place1:

          • WAN (public static ip/28 - ISP default gateway - Internet connection1 10Mbps)
          • LAN 192.168.0.200 (192.168.0.0/24 - no default gateway)
          • Gateways:
            • GW_WAN (default) (ISP default gateway)
            • pfsense2_OPT1 192.168.0.201 (not a default gateway)
          • Static Routes
            • Destination network 10.0.0.0/24 - gateway 192.168.0.201
          • Bypass firewall rules for traffic on the same interface checkbox is checked

          pfsense2 - place2:

          • WAN (public static ip/25 - ISP default gateway - Internet connection2 20Mbps)
          • LAN 10.0.0.200 (10.0.0.0/24 - no default gateway)
          • OPT1 192.168.0.201 (default gateway 192.168.0.200)
          • Gateways:
            • GW_WAN (default) (ISP default gateway)
            • pfsense1_LAN 192.168.0.200 (not a default gateway)

          The connection between pfsesne1- LAN and pfsense2-OPT1 is done by a NANO connection

          • NANO1 192.168.0.2/24 connected to the same subnet of pfsense1
          • NANO2 192.168.0.3/24 connected directly to pfsense2-OPT1

          now all PCs on the both sides can ping each others. But when i connect to internet in place 2, appear for me that i am using the public ip 2 but the speed of internet1 10Mbps. so the internet speed is the same in both sides

          1 Reply Last reply Reply Quote 0
          • DerelictD
            Derelict LAYER 8 Netgate
            last edited by Derelict

            Don't do it like that. Create a transit network and put the nano bridges on that.

            0_1541619357222_Forum-137480.png

            Bypass firewall rules for traffic on the same interface checkbox is checked

            If you have to use that checkbox you are almost certainly doing it wrong.

            Chattanooga, Tennessee, USA
            A comprehensive network diagram is worth 10,000 words and 15 conference calls.
            DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
            Do Not Chat For Help! NO_WAN_EGRESS(TM)

            1 Reply Last reply Reply Quote 0
            • S
              sarmad
              last edited by

              i will do, but have to make a load balance?

              1 Reply Last reply Reply Quote 0
              • DerelictD
                Derelict LAYER 8 Netgate
                last edited by

                No. If you WANT to you can create a gateway group using the ISP and the wireless gateways so if one side's ISP goes down it could have internet over the wireless, but that is independent of the static route to just the other side's LAN.

                Chattanooga, Tennessee, USA
                A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                Do Not Chat For Help! NO_WAN_EGRESS(TM)

                1 Reply Last reply Reply Quote 0
                • S
                  sarmad
                  last edited by

                  thanks Derelict
                  i made exactly the same design that you suggested and worked perfectly for two days and the ping from a pc in LAN1 to a pc in LAN2 was stable. Today, the ping from a pc in LAN1 to the NANO2 (connected directly to OPT2) is stay stable, but the ping from a pc in LAN1 to a pc in LAN2 isn't stable all the time.

                  1 Reply Last reply Reply Quote 0
                  • DerelictD
                    Derelict LAYER 8 Netgate
                    last edited by

                    Not sure what you are expecting from us there. Transient internet problems can and do occur. Wireless interference can and does occur.

                    Chattanooga, Tennessee, USA
                    A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                    DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                    Do Not Chat For Help! NO_WAN_EGRESS(TM)

                    1 Reply Last reply Reply Quote 0
                    • S
                      sarmad
                      last edited by

                      but i am not using the internet to connect the other side, i am using the nano connections, and the nano connection is stable because the ping of other side nano is stable.

                      1 Reply Last reply Reply Quote 0
                      • DerelictD
                        Derelict LAYER 8 Netgate
                        last edited by

                        Well I can safely say that "It's not pfSense."

                        Chattanooga, Tennessee, USA
                        A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                        DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                        Do Not Chat For Help! NO_WAN_EGRESS(TM)

                        1 Reply Last reply Reply Quote 0
                        • First post
                          Last post
                        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.