Navigation

    Netgate Discussion Forum
    • Register
    • Login
    • Search
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search

    Can't ping from opt1

    Routing and Multi WAN
    2
    20
    5183
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • S
      simpi last edited by

      my setup
      lan subnet 192.168.3.0/24
      wan subnet 192.168.1.0/24
      wan1 subnet 192.168.2.0/24

      prob is suppose i ping yahoo.com from webgui ping utility from wan interface i get reply but if ping  yahoo.com from wan1 i get requested time out and if i
      ping adsl modem i get reply…

      my setup pics

      1 Reply Last reply Reply Quote 0
      • GruensFroeschli
        GruensFroeschli last edited by

        Did you read the little note at the bottom telling you:

        Note:  Multi-wan is not supported from this utility currently.

        You can ping the modem because it is directly attached to the pfSense and traffic does not have to be sent to a router (gateway).

        1 Reply Last reply Reply Quote 0
        • S
          simpi last edited by

          first of all thanks for ur reply & i have read that note also ….the purpose of pinging yahoo.com from wan1 interface was because my load balance is not working. i checked it through traffic graph utility wan1 doesn't get any traffic.

          and 1 more thing i had tried adding static route to isp gateway and dns also it didn't worked. it only worked for gateway and dns i could ping  1 only whichever
          i added to static route

          1 Reply Last reply Reply Quote 0
          • GruensFroeschli
            GruensFroeschli last edited by

            Is the WAN2 in the balancing-pool status offline?
            What do you use as monitor-IP?

            1 Reply Last reply Reply Quote 0
            • S
              simpi last edited by

              it is always online be coz i monitor gateway

              1 Reply Last reply Reply Quote 0
              • GruensFroeschli
                GruensFroeschli last edited by

                Is the gateway on the ISP's side?
                Since it's a private IP i suppose not.
                Use the first hop on the ISP's side as monitor IP.

                Did you actually use the balancing pool in the firewall rule on your LAN as gateway?

                1 Reply Last reply Reply Quote 0
                • S
                  simpi last edited by

                  i cannot use 1st hope isp gateway as monitor becoz its dynamic it changes
                  and do use the balancing pool in the firewall rule on  LAN as gateway

                  1 Reply Last reply Reply Quote 0
                  • GruensFroeschli
                    GruensFroeschli last edited by

                    @simpi:

                    i cannot use 1st hope isp gateway as monitor becoz its dynamic it changes

                    This cannot be.
                    Otherwise your modem would lose connectivity whenever your ISP moves the IP of the gateway.
                    Can you show the two traces from a computer directly connected to the modems?

                    Can you show a screenshot of your LAN-firewallrules?

                    1 Reply Last reply Reply Quote 0
                    • S
                      simpi last edited by

                      gateway changes whenever i disconnect and reconnect internet i can't stay connected 24hrs isp reset connections after 24 hrs ….i post firewall rules soon

                      1 Reply Last reply Reply Quote 0
                      • S
                        simpi last edited by

                        firewall rules pic


                        1 Reply Last reply Reply Quote 0
                        • GruensFroeschli
                          GruensFroeschli last edited by

                          gateway changes whenever i disconnect and reconnect internet i can't stay connected 24hrs isp reset connections after 24 hrs

                          Now that is a hell of a strange ISP…
                          You could do a traceroute everytime you have a different IP/gateway and see from which point on you always take the same route.
                          Then use this IP as monitoring-IP. (Since it's always reachabel over the same way no matter what gateway you have)

                          @http://forum.pfsense.org/index.php/topic:

                          Rules:
                          Rules are processed from top to down.
                          If a rule catches the rest of the rules is no longer considered.
                          Per default a "block all" rule is always in place (invisible below your own rules).

                          Traffic is filtered on the Interface on which traffic comes in.
                          So traffic comming in on the LAN-Interface will only be processed by the rules you define on the LAN tab.

                          Your second rule is never doing anything :)

                          1 Reply Last reply Reply Quote 0
                          • S
                            simpi last edited by

                            Now that is a hell of a strange ISP

                            yes bcoz i m from india

                            (Since it's always reachabel over the same way no matter what gateway you have)

                            wht u say has point but i need add static route whichever ip need to reach beyond adsl modem tht means i need to change routes whenever gateway changes

                            1 Reply Last reply Reply Quote 0
                            • GruensFroeschli
                              GruensFroeschli last edited by

                              pfSense automatically creates static routes to the correct gateway for the monitor IP's.

                              1 Reply Last reply Reply Quote 0
                              • S
                                simpi last edited by

                                you don't get my point . i mean to say is i can't reach any public ip from wan1 interface without adding static route manually in pfsense thats the prob

                                1 Reply Last reply Reply Quote 0
                                • GruensFroeschli
                                  GruensFroeschli last edited by

                                  Then reread this again and think about it ;)

                                  @http://forum.pfsense.org/index.php/topic:

                                  Rules:
                                  Rules are processed from top to down.
                                  If a rule catches the rest of the rules is no longer considered.
                                  Per default a "block all" rule is always in place (invisible below your own rules).

                                  Traffic is filtered on the Interface on which traffic comes in.
                                  So traffic comming in on the LAN-Interface will only be processed by the rules you define on the LAN tab.

                                  Your second rule is never doing anything :)

                                  Your first rule (which is NOT loadbalancing) always catches.

                                  1 Reply Last reply Reply Quote 0
                                  • S
                                    simpi last edited by

                                    if i make load balancing the first rule internet stop working  i don't mean stop working u can say like if i open a webpage i need to refresh page 2 times before it opens

                                    1 Reply Last reply Reply Quote 0
                                    • GruensFroeschli
                                      GruensFroeschli last edited by

                                      What do you use as DNS server?

                                      1 Reply Last reply Reply Quote 0
                                      • S
                                        simpi last edited by

                                        i use open dns servers

                                        1 Reply Last reply Reply Quote 0
                                        • GruensFroeschli
                                          GruensFroeschli last edited by

                                          On the clients directly or on the pfSense?

                                          If it's on the pfSense you need to create a static route for one of the DNS-entries to the second WAN.
                                          Otherwise pfSense cannot resolve any DNS-requests while the primary WAN is down.

                                          1 Reply Last reply Reply Quote 0
                                          • S
                                            simpi last edited by

                                            thank u very much for ur support i finally solved the prob

                                            wht i did reinstalled pfsense and now i m monitoring next hop isp gateway as u said and added a static route
                                            for dns server on opt interface load balancing is working fine thank u once again

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post

                                            Products

                                            • Platform Overview
                                            • TNSR
                                            • pfSense
                                            • Appliances

                                            Services

                                            • Training
                                            • Professional Services

                                            Support

                                            • Subscription Plans
                                            • Contact Support
                                            • Product Lifecycle
                                            • Documentation

                                            News

                                            • Media Coverage
                                            • Press
                                            • Events

                                            Resources

                                            • Blog
                                            • FAQ
                                            • Find a Partner
                                            • Resource Library
                                            • Security Information

                                            Company

                                            • About Us
                                            • Careers
                                            • Partners
                                            • Contact Us
                                            • Legal
                                            Our Mission

                                            We provide leading-edge network security at a fair price - regardless of organizational size or network sophistication. We believe that an open-source security model offers disruptive pricing along with the agility required to quickly address emerging threats.

                                            Subscribe to our Newsletter

                                            Product information, software announcements, and special offers. See our newsletter archive to sign up for future newsletters and to read past announcements.

                                            © 2021 Rubicon Communications, LLC | Privacy Policy