Gateway Group(Active-Passive fail over) for only specific clients
I have a cable modem (connected to em0) and a 3G backup connection (connected to em3). My goal is to have outbound traffic from all of my clients go through the cable modem when its connection is up. If the cable modem is down, I want only specific clients to route through the 3G backup connection -- and any other clients to just not have internet access.
I have configured both gateways, and also created a gateway group where the cable modem gateway has a tier 1 priority and the 3g has a tier 2 priority.
I've also created 2 rules on the LAN interface: The first matches the priority clients I have and passes the traffic with the gateway set to the gateway group. The second rule matches all clients and passes the traffic with the gateway set to the cable modem gateway.
My though is that this should result in 100% of client traffic going through the cable modem gateway when it is up. When the cable modem is down, the priority clients should route through the 3g modem and the other clients should lose internet access. This however is not what is happening. When the cable modem is down, all clients end up routing through the 3g modem.
Here are my settings: https://imgur.com/a/6mKDqgU
192.168.10.201 is the host I want to use cable or 3g.
Why is this not working as intended? Am I thinking about this the wrong way?
I think this might be an issue with the setting of "Skip Rules When Gateway is Down". It seems I want this setting enabled so that when the cable modem gateway specified in the allow rule is down, the rule doesn't just turn into an allow rule for the default gateway (which has become the 3g backup connection).