<![CDATA[Multi Wan | Dynamic Rule Fail Over]]>Hello,
I currently have Multi Wan setup with failover/gateway groups. This works fine.

My question is using floating rules the way to apply rules dynamically to both WAN interfaces?

Currently I have rules applied only to WAN1 and WAN1 is down (ISP issue). So when I tried accessing my services all traffic hit WAN2, however the rules assigned to WAN1 are not duplicated to WAN2. So obviously they failed.

I currently have remote management/ACME/SSL attached to WAN1 but that failed over to WAN2. So all of those are resolving to WAN2 IP. I also have port forwarding to internal servers that I access remotely attached to WAN1.

Should I manually create the same rules on both WAN1 and WAN2?

Thank you in advance.

]]>https://forum.netgate.com/topic/176178/multi-wan-dynamic-rule-fail-overRSS for NodeFri, 13 Mar 2026 04:41:31 GMTWed, 30 Nov 2022 01:49:32 GMT60<![CDATA[Reply to Multi Wan | Dynamic Rule Fail Over on Wed, 30 Nov 2022 12:57:15 GMT]]>@viragomann

Thank you for responding, I will proceed with duplicating the rules then.

]]>https://forum.netgate.com/post/1073104https://forum.netgate.com/post/1073104Wed, 30 Nov 2022 12:57:15 GMT<![CDATA[Reply to Multi Wan | Dynamic Rule Fail Over on Wed, 30 Nov 2022 11:23:13 GMT]]>@posix
You cannot use floating rules or some ones on interface groups for allowing inbound on Multi-WAN.
You have to add the needed rules to each WAN interface tab.

The pfSense GUI provides a copy-button on the right of each rule. Simply hit it, so you get into the edit of the copy and change the interface to the other WAN to copy the rule over.

]]>https://forum.netgate.com/post/1073098https://forum.netgate.com/post/1073098Wed, 30 Nov 2022 11:23:13 GMT