Multiple PfSense firewalls on same Wan subnet
-
I have multiple PfSense firewalls at various locations connected with ipsec tunnels all working fine. At one site I have two Pfsense firewalls "A" handling all internet traffic and ipsec. "B" is running Haproxy to direct incoming traffic to web sites on the lan network.
The lan on both A and B is on the same internal network. When the outside world accesses the websites all is fine but when a machine on the Lan tries to get to a web site it times out.
Both routers can ping each other. Both "A" and "B" on the same Lan different addresses of course, Wan addresses are different.
I believe the problem is going out from the Lan thru Pfsense to the Wan then back into the second Pfsense Haproxy and into the same Lan but I'm not sure how to set it up to work.Browser --------|_________ |-----Pfsense A -- Wan x.x.x.1
________________ |--- Lan---|
Web servers ---|__________ |-----Pfsense B -- Wan x.x.x.2Obviously I could access the web servers with their internal addresses but I need network monitors to go thru Pfsense "B" to ensure Haproxy if working correctly.
Thanks HarryC
Pfsense 2.4.5 Haproxy 1.8.25 -
You have probably created an asymmetric route. Check the firewall logs on each pfSense you will probably see blocked traffic from the clients somewhere.
You should probably put the webservers in a different subnet.
Steve
-
No, this is not a correct key. This key is a private key, which is used to encrypt data. You need to generate a shared key, which is used to authenticate your connection. This shared key should be generated with a tool like OpenVPN or a similar VPN tool.
-
Wrong thread? Spam?
-
@stephenw10 look at the different IPs they coming from - bet you beer its "spam" incoming ;)
