Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    How to: HA with multi WAN and LCAP

    Scheduled Pinned Locked Moved HA/CARP/VIPs
    2 Posts 1 Posters 1.4k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • B
      BlueSun
      last edited by

      Hi,

      Can someone please give me some guidance on this:

      I want to setup a HA scenario with 2x PFSence firewalls, with a single WAN uplink to Each PFSense firewall. The ISP will setup LACP, on 2 switches in the same virtual chassis on their two switches for failover. They say I need to have MC-LAG capabilities, but don't see such an option in PFSense. Is this perhaps a setting, but named differently?

      The idea is, that if either firewall is offline, or either Uplink is offline, internet connectivity still works.

      See the following diagram of what I have in mind.

      23b45763-7ce2-43bf-8241-32f9f3cd92c8-image.png

      I had a look at the following article,but don't have the extra switches they talk about, and thus not sure how to setup PFSense on the two Firewalls
      https://docs.netgate.com/pfsense/en/latest/recipes/high-availability-multi-wan.html

      What I want to achieve:

      • high availability so that if either of the ISP uplinks, or our PFSense firewalls, or our own L3 switches were to go down, everything still works.
      • We use OpenVPN, and OpenVPN needs to automatically work on the active / Master firewall. I guess this will be due to the floating IP address between the 2 firewalls?
      • We use HAProxy to expose to Virtual Machines to the internet. HAProxy also need to have high availability, which I guess will also work with the floating IP
      B 1 Reply Last reply Reply Quote 0
      • B
        BlueSun @BlueSun
        last edited by

        Can anyone give some pointer on this?

        1 Reply Last reply Reply Quote 0
        • First post
          Last post
        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.