Dual Wan Setup and Loadbalancing - ping problem

[dirty]

Hi All,

I am having problems with Dual Wan Setup and Loadbalancing. My configuration is as follows:

pfsense version – 1.0.1

IP Ranges
LAN – 10.2.4.0/24
WAN – 192.168.1.0/24
OPT1- 172.16.1.0/24

pfSense Router
LAN – 10.2.4.15
WAN – 192.168.1.10 (Static) connecting to Netgear router (internal IP 192.168.1.1, external IP is Static DSL). Netgear router is DMZ to WAN
OPT1 – 172.16.1.10 (Static) connecting to Linksys router (internal IP 172.168.1.1, external IP is Dynamic Cable)
*ISP’s are not the same company

I have not enabled Advanced Outbound NAT (I think this is optional) and the following psSense Firewall rules apply:

LAN – LAN > Any utilising loadbalance pool as gateway
Default LAN > Any applies using default gateway
WAN – Nil
OTI1 – Nil

I have disabled Block Private Networks option

I can confirm that both WAN and OPT1 are functional (initially – after reboot of psSense) as I can access HTTP and POP3 etc. and when viewing the Loadbalancing status both links are online and green. However, after a period of time (say 10-15mins) OPT1 link goes offline. If I try to ping from OPT1 (via pfSense utility) to ISP gateway (as defined by WAN connection status page of Linksys router) I get no response. From this point on I can not ping any external hosts from OPT1, however internal hosts are ok? My first thought was that the Linksys router might be disconnecting but upon checking the Linksys connection status page all seems in order.

I am sure that I have missed something very simple and hope that someone can point me in the right direct.

[jeroen234]

i think this is a typo ?

OPT1 – 172.16.1.10 (Static) connecting to Linksys router (internal IP 172.168.1.1, external IP is Dynamic Cable)

you meen OPT1 – 172.16.1.10 (Static) connecting to Linksys router (internal IP 172.16.1.1, external IP is Dynamic Cable)

[hoba]

@dirty:

LAN – LAN > Any utilising loadbalance pool as gateway
Default LAN > Any applies using default gateway
WAN – Nil
OTI1 – Nil

I don't understand the first of these rules LAN-LAN. Please explain.

What are you using as monitor IPs for your WAN links? are they unique? You shouldn't use the same monitor IPs for both links.

[dirty]

@jeroen234:

i think this is a typo ?

OPT1 – 172.16.1.10 (Static) connecting to Linksys router (internal IP 172.168.1.1, external IP is Dynamic Cable)

you meen OPT1 – 172.16.1.10 (Static) connecting to Linksys router (internal IP 172.16.1.1, external IP is Dynamic Cable)

jeroen234 you are correct internal ip on linksys is 172.16.1.1

[dirty]

@hoba:

@dirty:

LAN – LAN > Any utilising loadbalance pool as gateway
Default LAN > Any applies using default gateway
WAN – Nil
OTI1 – Nil

I don't understand the first of these rules LAN-LAN. Please explain.

What are you using as monitor IPs for your WAN links? are they unique? You shouldn't use the same monitor IPs for both links.

hoba,

I have attached a pic of the LAN rules of one of the loadbalancing pool

In reference to the monitor ip's I am using the respective gateway ip from each ISP and yes they are unique.


[hoba]

Make sure your monitor IP at optwan doesn't stop responding. Maybe it's configured to not allow permanent pings and to block you after some time. Try a different monitor IP. Just for testing I suggest using the gateway of the pfsense (the linksys router).

[dirty]

OK

I have made some progress on this.

It seems there may be a compatibility issue betweem my Linksys Router (Model BEFSR41V4) and pfSense Loadbalancing. At this stage I am not sure if it is an inbuilt firewall rule on the Linksys Router (which prevents pings after a certain amount of time) or the type of Broadband Cable connection I have. In Australia my ISP (Telstra Bigpond) utilises a unique Heartbeart Signal/Authentication System (a real pain in the behind).

Anyhow, I changed routers (i am now using ipcop to connect to my ISP) and loadbalancing works fine.

I will do more investigating and try and get to the root of the problem and post here if successful.