Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    LAN to OPT2 routing in multi-wan setup

    Scheduled Pinned Locked Moved Routing and Multi WAN
    3 Posts 2 Posters 3.2k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • D
      dolbie2
      last edited by

      I have a multi-wan setup. I also have LAN and DMZ on two more interfaces. In DMZ i am hosting a web server. And LAN, I'm using for internal users.
      I'm having a problem pinging the web server in the DMZ from LAN when WAN is down.

      My setup looks like this with WAN & WAN2:

      Provider 1  –> WAN --> |                | --> DMZ
                                       |   pfsense  |
      Provider 2  --> WAN2--> |               | --> LAN

      I configured a failover mode and I'm using 8.8.8.8 and 8.8.4.4 as monitor IPs. Failover is working from LAN to WAN and LAN to WAN2. But, I can't ping from LAN to DMZ when WAN is down.

      I have no settings in my Static Routes.

      In my rules, I am selecting wan1failstowan2 for gateway. Which basically is the gateway of the WAN2 when WAN fails. When my rule uses this WAN2 gateway, I cannot connect to any box in LAN.

      I want to accomplish the below:

      1. Ping and connect to any web server in DMZ from LAN when WAN is up and WAN2 is down.
      2. Ping and connect to any web server in DMZ from LAN when WAN is down and WAN2 is up.
      3. Ping and connect to any web server in DMZ from LAN when WAN and WAN2 both are up or both are down.

      Here is my pool:

      Here are my rules:

      Any help from one of you experts is greatly appreciated!

      Thank you.

      Rules-LAN.JPG_thumb
      Rules-LAN.JPG

      1 Reply Last reply Reply Quote 0
      • jimpJ
        jimp Rebel Alliance Developer Netgate
        last edited by

        Add a rule to the top of the rule lists on LAN and DMZ that passes traffic to your local networks but has the gateway set to "default" - See if that helps. Policy routing will cause traffic to bypass the routing table.

        I thought it did that automatically for locally connected networks, but I know that is needed for VPNs and other similar networks.

        Remember: Upvote with the 👍 button for any user/post you find to be helpful, informative, or deserving of recognition!

        Need help fast? Netgate Global Support!

        Do not Chat/PM for help!

        1 Reply Last reply Reply Quote 0
        • D
          dolbie2
          last edited by

          Jimp: I added a rule as you suggested and it worked. Thank you very much.

          1 Reply Last reply Reply Quote 0
          • First post
            Last post
          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.