Pfsence 1.2.3 RC1 with Double WAN ISP providers - wan failover/balance



  • Deers,

    I have 2 COmcast connection with dynamic IP's. Is there any way to do WAN/Balance fail-over with 2 WAN dynamic ISPs?

    Additionaly, I would like to use OPEN VPN to another PFSence. Here is diagram

    Comcast–-dynamicIP---WAN1-----
                                                  |
                                                  |  PFSENCE 1.2.3 RC1  -----------openVPN-----------------PFSence1.2.3 RC1
    Comcast---dynamicIP---WAN2-----

    Is there any good easy guide for that scenario?

    Thank You



  • There are many guides if you read the documentation, though I seem to recall you need to have different default gateways for fail-over to work.

    Oh, and you really should upgrade to 1.2.3 release - there's no reason to still be using the first release candidate.



  • when upgrading from 1.2.3RC1 to 1.2.3RELEASE my DHCP dissappeared …. had to setup from CLI again.



  • looks like it does not work after reading the book and two tutorials….

    ![load balancer.jpg](/public/imported_attachments/1/load balancer.jpg)
    ![load balancer.jpg_thumb](/public/imported_attachments/1/load balancer.jpg_thumb)





  • when I unplugged WAN2 load balancer status showed all UP and could only ping some IPS, could not open www so DNS was somehow disabled.

    Sticky Connection enabled and dns forwarders like below




  • you need to have different default gateways for fail-over to work

    do you have that?
    If you haven't already then use 8.8.8.8 and 8.8.4.4 as your DNS servers



  • 8.8.8.8 and 8.8.4.4 were used as main DNS'es



  • You should not be using sticky with outbound load balancing.  Disable this.



  • OK I will disable it and test it…..

    Thank You



  • It looks like it did the trick.

    WAN fail-over 2 ISP's (Comcast)  works. The only load balance I believe is not working correctly. I set it as in guide for 1.2.x. and  they looks like ….

    From my understanding if I open two www pages one should go through WAN1 and the other one through WAN2 - right? If yes then both go through the same WAN1 interface.

    Please advice

    ![load-status balancer.jpg](/public/imported_attachments/1/load-status balancer.jpg)
    ![load-status balancer.jpg_thumb](/public/imported_attachments/1/load-status balancer.jpg_thumb)
    ![firewall rulles.jpg](/public/imported_attachments/1/firewall rulles.jpg)
    ![firewall rulles.jpg_thumb](/public/imported_attachments/1/firewall rulles.jpg_thumb)



  • is load balance working in 1.2.3 release ?

    Looks like this is the only problem at this time …..

    please advice



  • Load balancing, both inbound and outbound works perfectly in 1.2.3.



  • then I had to screw it up something …..


Locked