Nat in failover works only when the WAN1 is up

  • Hi, I've got a PFSense 1.2.3 release with 1 LAN and 2 WAN
    WAN1 is a PPPoE with a static IP
    WAN2 is an ADSL with a cisco router (wan2 is, cisco LAN il, cisco wan have the static ip and all the ports are natted to
    LAN1 is 192.168.1.x

    I've got 2 failover pools
    WAN1 to WAN2
    WAN2 to WAN1

    I've got the same nat both on WAN1 and WAN2 that goes to a server in the internal network
    (for example port 25 both from wan1 and from wan2 point to

    All works fine if WAN1 is UP.

    I can go out from wan1 or from wan2 without problem, i can came in to port 25 trought both the pubblic ip address of WAN1 and WAN2.

    The problem is that when WAN1 goes offline ("disconnected".. is a pppoe). the internal pcs correctly goes on internet trought WAN2, but the WAN2 nat, that works fine until the WAN1 was UP, doesn't work anymore!

    Do you have any suggestion?


  • nobody have any suggestion?

    new test:
    Wan1 (PPPoE) off, try to telnet from outside to port 25 on WAN2 IP. The correct rule is trigged:
    The rule that triggered this action is:
    @94 pass in log quick on bge0 reply-to (bge0 inet proto tcp from any to port=smtp flag S/SA keep state label "USER_RULE:NAT SMTP FROM WAN2"
    but the packet don't pass…
    same test with WAN1 ON, the same rule is trigged and the packet correctly pass..


Log in to reply