Dual wan dual lan (lan1 Lan2 and wifi)
-
I want to set up two wans and 3 lans wan 1 is for lan1 and lan2 (wired and wifi) and wan2 for lan3. wan1 is only for lan1/2 and wan2 is only for lan3. lan3 has access to wan2 only and lan1/2 has access to wan1 only. I have read on the forums and help documentation that its possible for load balancing meaning that wan1 and wan2 are shared among all lans, I need them to be dedicated/seperate, is this possible?
-
You don't need loadbalancing. You need some pass firewall rules thus:
LAN1
* LAN1 net * * * WAN1LAN2
* LAN2 net * * * WAN1LAN3
* LAN3 net * * * WAN2You don't want a default allow rule on your LAN interfaces. If you want any access from one LAN to another then you will have to create specific rules for that.
db
-
i was thinking of something like that but thought that since i have never done multiple wans before i would check the forums but most mentioned using load balancing them and that all lans would be able to access all wans.
what about the special settings that are given to the first wan interface, is there a way to give those to the 2nd wan? (block private/bogon networks etc.)? or should i not worry about this stuff?
thanks for your help.
-
most mentioned using load balancing them and that all lans would be able to access all wans.
Most multiwan setups use load balancing, which makes things a little more complex to set up. In your case it's as simple as setting up pass rules to define what goes where. Anything not explicitly passed will be blocked, and if one WAN fails then the associated LAN will not fail over to another WAN because you haven't allowed it.
what about the special settings that are given to the first wan interface, is there a way to give those to the 2nd wan? (block private/bogon networks etc.)? or should i not worry about this stuff?
The answer to that is explained here:
http://marc.info/?l=pfsense-support&m=124483410623342&w=2In short, I wouldn't worry about it too much unless you have specific cause to worry.
db
-
thanks for your help, sound like 2.0 will support multi wans native cant wait.