Need expert advice: WAN Loadbalacing into same subnet
-
Hi,
My ISP sadly only provides a 2gbps fiber connection in combination with their own modem/router combo.
On the LAN side of the router 1gbps ports are available and on the Wan side one single iP is provided (already asked for more and was denied).Here is a view of their architecture:
I'm trying to utilize pfsense as loadbalancer to make use of the full 2gbs unlink.
While I can set the modem/router to bridge mode that will (so I think) not allow me 2 connections to pfsense as there is only one public ip.Hence I'm looking at using a (not ideal) double NAT configuration to get this to work. (See below)
Now my question; can I configure pfsense in a way that it can loadbalance to the 2 Lan ports on the router/modem combo even if both LAN ports are in the same subnet with the same gateway ip? (Documentation suggests I need one more nat on the 2nd link)Thanks
-
Why are some ISPs doing kinky sh*t like this?
AFAIK there is really no smart way around this with the same gateway IP on both pfSense WANs.
Only solution is to put any NAT router between their router and pfSense WAN2.
If you tend to virtualize pfSense anyway of course this could be a second pfSense instance.-Rico
-
Ummmm have they discovered how to get a football down a garden hose.
-
Do you actually get 2Gbps ?
The spec for the Netgear MK63 states the following:-
https://www.downloads.netgear.com/files/GDC/mesh/MK63_DS.pdf
-
@rico Thanks for the reply. Feared as much :-(
This solution would end up with double NAT on one and triple NAT on the 2nd interface :-(
Not the most elegant solution. Easier to change ISP in the long run. -
@nogbadthebad The 2Gbps are on the fiber interface. The modem/router is not the netgear which is one of the many AP add on options they offer. Essentially when it comes to firewall/router I'm stuck with some generic fiberhome ONT device with very limited options only. Everything else runs behind this router in AP or double NAT mode only if I want to make use of the 2Gbps fibre uplink (the 1Gbps tennis balls on the LAN side merge into a 2Gbps football on the fiber side :-) )
-
@idefixrc There are some very dubious statements on your ISPs web site.