Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    policy based routing question - 2xWAN, one static, one dynamic

    Scheduled Pinned Locked Moved Routing and Multi WAN
    3 Posts 1 Posters 337 Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • S
      sgw
      last edited by sgw

      I am browsing the docs and the forum looking for an example or even howto to achieve this:

      Currently I run a MultiWAN-setup with 2 tiers: WAN1 on Tier1, WAN2 on Tier2.
      So WAN2 isn't used normally. No load balancing.

      WAN1 gives me static external IPs, which are needed for (a) providing services (MX record, VPN access from outside) and (b) are tied to some access rules to other sites (customer is only allowed to access some external services using these IP adresses).

      So basically the bandwidth of WAN2 is wasted/unused most of the time.

      If I move both gateways to Tier1 I'd get all the bandwidth used and load balanced, right?

      Now what I want to achieve is:

      I'd like to configure that all traffic coming from specific (V)LANs (think: "office) uses WAN1 in the "both gws useable" case -> these should go out using the static IP(s) of WAN1 (and in turn use the bandwidth of WAN1).

      Another VLAN should be routed through WAN2 always, no need for static IP(s) there, but the need for the bandwidth of WAN (which we currently can't use).

      In case of a WAN1 failure everything should be routed via WAN2: ok, MX records and that wouldn't work then, but basic connectivity is provided.

      I am sure this can be solved with policy based routing, I just could need some example to learn from.

      thanks, Stefan

      S 1 Reply Last reply Reply Quote 0
      • S
        sgw @sgw
        last edited by

        I found https://docs.netgate.com/pfsense/en/latest/multiwan/policy-route.html#bypassing-policy-routing (already before posting, forgot to mention) and will try to set up something similar.

        S 1 Reply Last reply Reply Quote 0
        • S
          sgw @sgw
          last edited by

          Learned quite a bit today ;-) and it works. Thanks for pfsense and the docs!

          1 Reply Last reply Reply Quote 0
          • First post
            Last post
          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.