Wan Gateway + OpenVPN Failover

bbicudo · Jun 10, 2021, 2:58 PM

Maybe you guys can help me here...

I have one PFSense on one of our buildings (1.6km from where i work). Both buildings are connected trhough optical fiber, so we're in a LAN.

Both buildings have a WAN link from different ISPs.

We have a recurrent problem where our fiber keeps being broken by high trucks, so once a month or two we have to fix it, and in the meanwhile we lose our LAN connection, so we can't reach servers on the other side.

I installed another PFSense on the second building, and configured a Site-to-Site VPN (OpenVPN).

I then set-up a gateway for my LAN network, in order to keep track of it, and defined a gateway group for failover with my LAN as Tier1 and OpenVPN as Tier2.

When i put LAN down, VPN won't assume tier 1 to interconnect both networks. Am i doing something wrong? Maybe it's impossible to achieve or my scenario is not suitable for such configuration?

If someone could help on this i'd be grateful.

Ps.: Sorry for the bad english.

Thanks everyone!