Gateway group & selective filtering

[John Gillespie]

Hi,

I have a gateway group setup behind a pfSense cluster for failover purposes.

The primary fibre link is defined as tier 1, the secondary 4G link is defined as tier 2.
This config works nicely so thanks to anyone who was involved in coding it !

I'd now like to take this one step further and restrict which hosts are accessible from certain subnets when we're running on the backup link.
One way of achieving this would be to tweak the outbound NAT rules. Is there another (perhaps more elegant) way of doing this ?

Cheers,
John

[Derelict]

I would need a diagram to be able to even make a guess. That description of the problem doesn't contain enough detail.