policy based routing question - 2xWAN, one static, one dynamic
-
I am browsing the docs and the forum looking for an example or even howto to achieve this:
Currently I run a MultiWAN-setup with 2 tiers: WAN1 on Tier1, WAN2 on Tier2.
So WAN2 isn't used normally. No load balancing.WAN1 gives me static external IPs, which are needed for (a) providing services (MX record, VPN access from outside) and (b) are tied to some access rules to other sites (customer is only allowed to access some external services using these IP adresses).
So basically the bandwidth of WAN2 is wasted/unused most of the time.
If I move both gateways to Tier1 I'd get all the bandwidth used and load balanced, right?
Now what I want to achieve is:
I'd like to configure that all traffic coming from specific (V)LANs (think: "office) uses WAN1 in the "both gws useable" case -> these should go out using the static IP(s) of WAN1 (and in turn use the bandwidth of WAN1).
Another VLAN should be routed through WAN2 always, no need for static IP(s) there, but the need for the bandwidth of WAN (which we currently can't use).
In case of a WAN1 failure everything should be routed via WAN2: ok, MX records and that wouldn't work then, but basic connectivity is provided.
I am sure this can be solved with policy based routing, I just could need some example to learn from.
thanks, Stefan
-
I found https://docs.netgate.com/pfsense/en/latest/multiwan/policy-route.html#bypassing-policy-routing (already before posting, forgot to mention) and will try to set up something similar.
-
Learned quite a bit today ;-) and it works. Thanks for pfsense and the docs!