2 ISP, 2 pfSense and 2 Core Switch

digitalcomposer

Hi

Could you please give me some tips.

I will start a project with 2 ISP, 2 pfSense and 2 Core Switches.

I need WAN Failover/Loadbalancing, HA PF1<->PF2, Core Switch Redundancy

Thanks!

heper

if i may ask, what is the point of the core-switch redundancy?
are your clients STP aware ?

also, i doubt it is possible (by gui) to get pfsense working inside this STP clusterfuck

digitalcomposer

Hi,

I was just thinking if I have firewall ha, it will be good to have also Switch ha.

Thanks!

heper

ok, but how will you do this pratically ?

client_A <--utp--> core_switch1
client_A <--utp--> core_switch2

??? gonna put dualport nics in all your clients??

digitalcomposer

No, sorry

After the core switches are access switches.

digitalcomposer

Ok, I read this and now I am a step forward.

My question is, why I need 2 CARPS on every wan net, isp1_ip1+isp1_ip2=isp1_carp1 and this will be sync to both pfsense's ?

digitalcomposer

Do I need 1:1 NAT for the DMZ, because I use Port-Forward for this and not 1:1 nat?

digitalcomposer

digitalcomposer

Nobody?!?