2 Locations 2 WAN + PTPT1 Want to fail over internet from location 1 - 2



  • First off, I have been using PFSense for nearly 4 years now and I REALLY like it.  I have been able to do nearly anything I want with it (except this).

    OK, what I have currently is a fairly complex setup between two offices that includes a PTPT1 and an IPSEC VPN between the T1 Routers as a Failover if the T1 goes down.  The PFSense Boxes each have a WAN connection, PTP Connection, LAN, and WiFI.  The attached image shows the layout much better than I can describe it, please take a look at it for all the details.

    What I need to be able to do is in case the WAN goes down at either office route the default gateway out the other office over the PTPT1.  To date I have not been able to get my head around it.  The T1 Routers are running a stripped down version of Linux with a custom Web GUI, though I can SSH into them as well.

    I will be happy to provide further details if needed.

    While typing this I am wondering if I could simply assign a secondary IP to each PFSense box from my pool of IPs at the opposite location and then add routes across the T1 for those IPs. Hmmm.

    e.g. At Location 1 add BBB.BBB.BBB.CCC to the 192.168.251.1 interface, and at location 2 add AAA.AAA.AAA.CCC to the 192.168.252.1 interface.  Then add Static routes to PFSense and each T1 Router to get to the other end.  But that won't work unless I NAT the IP??

    Can anyone confirm that would work?

    Can I add a secondary IP that won't get lost when the GUI is updated?

    The more I think about this the more I think it will not work as I expect.  Ideas???
    ![PFSense WAN.jpg](/public/imported_attachments/1/PFSense WAN.jpg)
    ![PFSense WAN.jpg_thumb](/public/imported_attachments/1/PFSense WAN.jpg_thumb)
    ![PFSense WAN.jpg](/public/imported_attachments/1/PFSense WAN.jpg)
    ![PFSense WAN.jpg_thumb](/public/imported_attachments/1/PFSense WAN.jpg_thumb)


Log in to reply