Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    WAN PORT WITH VLANS CONNECTED TO ISP AND IP ASSIGNMENT.

    Routing and Multi WAN
    4
    13
    11.3k
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • D
      doktornotor Banned
      last edited by

      Dude, go read the post above yours once again.

      1 Reply Last reply Reply Quote 0
      • D
        dugbart
        last edited by

        hello doktornotor,

        please have you read my posting the beginning?

        may be I have to re draw the diagram for you to understand if you don't mind.

        thanks

        1 Reply Last reply Reply Quote 0
        • D
          doktornotor Banned
          last edited by

          Yes, I did. The post above answers exactly what to do in exactly what order to get exactly what you want. No need to redraw anything.

          1 Reply Last reply Reply Quote 0
          • D
            dugbart
            last edited by

            @doktornotor,

            will study the above carefully and revert.

            thanks

            1 Reply Last reply Reply Quote 0
            • DerelictD
              Derelict LAYER 8 Netgate
              last edited by

              @dugbart:

              however  from the diagram you attached to your reply

              That diagram is completely unrelated to your issue.  You made your own diagram.

              Chattanooga, Tennessee, USA
              A comprehensive network diagram is worth 10,000 words and 15 conference calls.
              DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
              Do Not Chat For Help! NO_WAN_EGRESS(TM)

              1 Reply Last reply Reply Quote 0
              • D
                dugbart
                last edited by

                @ Derelict,

                thanks, but can the idea i presented on the my diagram be successfully implemented on pfsense?

                thanks

                1 Reply Last reply Reply Quote 0
                • DerelictD
                  Derelict LAYER 8 Netgate
                  last edited by

                  Yes.  Just do what I told you to do.  There is no requirement to set anything on eth0.  Just reassign your existing WAN to VLAN 10 on eth0 and put it on a tagged port.  Then create a new interface for the second ISP assigned to VLAN 5 on eth0.

                  Chattanooga, Tennessee, USA
                  A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                  DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                  Do Not Chat For Help! NO_WAN_EGRESS(TM)

                  1 Reply Last reply Reply Quote 0
                  • D
                    dugbart
                    last edited by

                    Hello Derelict,

                    Thanks for your advice. I have configure the two vlans and connected it to the pfsense box and it's working. i can access the web from any machine on the lan now.

                    Am however facing some challenges concerning packages installation. evethough i can access the web now over the pfsense box  i can't get my packages installed. i keep getting this error message
                    "Unable to communicate with https://packages.pfsense.org. Please verify DNS and interface configuration, and that pfSense has functional Internet connectivity."

                    I have checked all my dns yet i can get the packages.

                    any advice is welcome

                    1 Reply Last reply Reply Quote 0
                    • I
                      ihrewerbung @Derelict
                      last edited by ihrewerbung

                      @Derelict
                      Hi and thx for your (old) post. i tried this with a GS105Ev2 but did not succed. Does this switch is no capable do handle it?

                      What i did:

                      The part on pfsense was clear to me and i did as you told

                      • created two new VLAN: 5 & 10 both on igb0
                      • Assigned WAN(igb0) to the VLAN10 on igb0
                      • Createt a new interface and assigned to VLAN5 on igb0

                      I did the following on the Switch:
                      VLAN Configuration:

                      • Created three VLAN IDs: 5 & 10 (and 20 - later for the ports i dont have in use)

                      VLAN-Membership:

                      • I put Port 1 an 3 as Member of VLAN ID 5, where port 3 was "U" and port 1 was "T"
                      • put Port 1 a 2 as Member of VLAN ID 10, where port 2 was "U" and port 1 was "T"
                      • I put Port 4 an 5 as Member of VLAN ID 20, both "U"

                      Port PVID:

                      • put port 3 to PVID 5
                      • Port 2 to PVID 10
                      • Port 4 & 5 on PVID 20

                      I then plugged in

                      • ISP1 (192.168.1.1) to port 2 (member of VLAN 10)
                      • ISP2 (192.168.5.1) to port 3 (member of VLAN 5)
                      • WAN pfsense (expecting Gateway 192.168.1.1) connected to port 1 (Member of VLAN 5 & 10 and tagged)
                      • left port 4 & 5 empty as they are not in use

                      But it does not work. only if plug ISP2 off it works.
                      Any suggestions?

                      ***Its all good now, i did not configure the new created Interface "VLAN 5" to the end. I forgot do assign to a gateway and give a static ip (in my case: 192.168.5.2).

                      So now both WAN are online. However, what i found a pitty is that i dont see a way to customize pfsense in a way that i have the two interface load balanced for more internet bandwidth and at the same time have all the traffic "routed" out over 5 balanced vpn (mullvad for example) server).***

                      Best regards
                      Santo

                      1 Reply Last reply Reply Quote 0
                      • I
                        ihrewerbung @Derelict
                        last edited by

                        @Derelict
                        Hi, now everything so fine and load balancing over to WAN function as desired. Meaning I get the bandwidth as sum of both WAN. Now I have to questions:

                        • If I check "sticky connections" I no longer have the sum of both bandwidth. Its rather randomly once WAN1 or WAN2. Eeven mixed for Upload/Downlaod meaning it may occur that for download it takes WAN1 and for upload WAN2 but never both. It this the expected behavior?

                        • How can I load balance the two WAN get both bandwidth added but still redirect all the traffic over VPN-Server (like mullvad, one or more sever)?

                        Best regards
                        Santo

                        1 Reply Last reply Reply Quote 0
                        • First post
                          Last post
                        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.