Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Dual wan employee wan1 visitors wan2

    Scheduled Pinned Locked Moved Captive Portal
    5 Posts 4 Posters 3.0k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • M
      mindustries
      last edited by

      Is it possible to have 2 wan no load balancing with a captive portal that would direct employees to wan1 and visitors to wan2 ??

      Thank You

      1 Reply Last reply Reply Quote 0
      • GruensFroeschliG
        GruensFroeschli
        last edited by

        Not with the Captive portal.

        But it should be possible with correct configuration of the DHCP-server and corresponding firewall rules.

        We do what we must, because we can.

        Asking questions the smart way: http://www.catb.org/esr/faqs/smart-questions.html

        1 Reply Last reply Reply Quote 0
        • S
          scottnguyen
          last edited by

          Could you please elaborate further on how to?  Example configuration.  Thank you.

          1 Reply Last reply Reply Quote 0
          • G
            gekko_uk
            last edited by

            I too would be interested in how this would work.

            1 Reply Last reply Reply Quote 0
            • GruensFroeschliG
              GruensFroeschli
              last edited by

              You create an alias containing all the IPs of your "internal" users.
              Then create an alias containing the IP-range of your "external" users.

              Set the DHCP to assign unknown users an IP out of the "external users" range.
              All your internal users are configured on the DHCP server to always get the same IP.

              When creating a firewall rule you can define to which gateway you want to send traffic.
              Now create two rules.
              One for the internal users and one for the external users.

              Of course if an external user assigns manually an IP out of the "internal users" range he can use the other WAN.
              But from the way you describe it (since you allow guests on the same network than employees) security isn't that much of a concern for you.

              We do what we must, because we can.

              Asking questions the smart way: http://www.catb.org/esr/faqs/smart-questions.html

              1 Reply Last reply Reply Quote 0
              • First post
                Last post
              Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.