Need help with Multi-WAN and Carp setup

jhabers

I am putting together a network with 2 PFSenses with carp and 2 wan interfaces per PFSense. I have started to set up the carp and multi WAN on PF1 but seem to be stuck at the multi wan load balance setup. All traffic seems to just go out WAN1 and never WAN2.

I have this setup at a datacenter where they give me 2 ethernet ports for redundancy. I have a /28 to use. I would like all traffice to come in and go out under 1 ip address, the 216.134.202.116.

I have attached some screenshots on how I currently have things configured now but all traffic seems to just go out WAN1.

Any ideas? I have the book but I dont seem to find too much info on multi wan with carp. Also the 2 ethernet ports that I get from the data center are unlike the senarios in the book where you have 2 separate ISP's for each wan connection, these are from the "same isp" and I can use the same ip addressing on each (but not at the same time obviously).

Thanks
Jonathan

wan.png_thumb

wan2.png_thumb

vip.png_thumb

out_nat.png_thumb

lb_status.png_thumb

lb_pool.png_thumb

jhabers

correction: i guess i really dont need it load balanced, just failover

jhabers

Got IT! Needed to add another CARP VIP to WAN2 and set up an outbound NAT for it, also needed to change the default LAN rule too Use the WAN Pool as the gateway. I am logged in remotely now but after refreshing ipchicken.com my external IP changes. :)

Jon

jhabers

I also changed the pool type to failover since there is a fixed bandwith across the 2 internet ports so load balancing wouldnt really do anything. I really just anted it for redundancy anyways. Will do a physical test by disconnecting cables on Monday.

Now on to finish setting up the 2nd pfsense for carp fail over and set up pfsync :)

chrisluk

just curious. why you need multi-wan when your WANs are on the same network segment? CARP should be good enough for fail safe.

by the way, Multi-WAN + CARP should be working on 1.2.3-Release. setup the interface(s) individually from both master and slave, then setup CARP accordingly. and then go for Multi-WAN according to the book just like without CARP.