Delay or manual failback?
I have an SG-3100 running pfSense 2.4.3 and I have two ISPs connected. It's working perfectly and it did do a failover fine last week but the primary ISP was "flapping", which caused the pfSense box to go back and forth from ISP to ISP.
Is it possible to have a time delay, or have pfSense make sure that the ISP is stable for at least an hour, before doing a failback? I'd even be happy with a manual failback.
If you want a manual failback in that situation, just mark that gateway as down. You will still get dpinger data and be able to see what's going on with the gateway.
Mark Gateway as Down This will force this gateway to be considered down.
When you want to put it back in the gateway group, just unmark it as down.
You can tweak the parameters used for how long it takes to mark a gateway as down or up to help reduce flapping but I don't think you can make it fail quickly then wait to come back up. The failure and recovery thresholds are the same
You mentioned that I could tweak the parameters for how long it takes to mark the gateway as up or down. Which parameter is that?
I would like for the system to wait at least 20 minutes before switching back to the primary gateway.
I said they are the same. The criteria for going down must clear before it is brought back up.
System > Routing, Gateways, Edit the gateway, Display Advanced
Ahh.. OK. Thank you! That was exactly what I was looking for!