2 pfSense and 2 WAN links how to make redundancy
-
Hi
I have:
2 pfSense on bare metal with 4 ethernet ports cards on each.
2 independant WAN links each with a fiber to eth ONT.
each fiber link is connected (PPPOE on specific vlan due to ISP reqs) and it's working,
Currently, each box is used by one floor.I would like to merge the 2 floors hw, have multiwan and redundant pfsense.
On LAN side, I have 3 vlans, each using one ethernet port. total ports used is 4, 100% of the available.
Any example of HA configuration I have found shows WAN link connected to each box. And, now, I don't have an ethernet port free to plug one more eth cable.
Is there any drawback when using multiple vlans on a single eth port (to free up a port for a 2nd WAN link) vs 1 vlan per port ?
Is it better/required to add a switch on the WAN side ?
Is there a way to leave the 2 boxes with only it's current WAN link active and have some redundancy for internet access from LAN if the master dies ?thx
-
@balmmva
A WAN interface behaves basically like any other. So for HA you need three IPs in a subnet.However, CARP isbnot compatible with PPPoE. You will have to put a router in front of the WANs.