Dual Wan Load balance/failover with Dynamic Gateways



  • :)
    Again, great product!

    Environment 1.0.1-SNAPSHOT-01-19-2007 built on Fri Jan 19 15:38:01 EST 2007
    LAN  192.168.1.1
    WAN DHCP(192.168.0.2)  SS6520 ADSL2+ Router  @192.168.0.254
    OPT1 DHCP(192.168.2.2)  SS6520 ADSL2+ Router @192.168.2.254

    Load Balancer:Pool
    Wan1BalanceWan2  gateway  wan opt1 64.235.192.30 64.230.199.5 Load balance Wan1&Wan2   
    Wan1FailoverWan2  gateway  wan opt1 64.235.192.29 64.230.199.5 Traffic via Wan1 | Wan2

    The Wan1FailoverWan2 Pool is used for outgoing SSH HTTPS.

    Both SS6520s have PPPoE connections with Static IPs except that the Gateway for WAN can change between 64.235.192.29 and 64.235.192.30.

    Changes in the Gateway cause
    Jan 21 18:20:19 slbd[1435]: Service Wan1BalanceWan2 changed status, reloading filter policy
    Jan 21 18:20:19 slbd[1435]: ICMP poll succeeded for 64.235.192.30, marking service UP
    Jan 21 18:20:19 check_reload_status: reloading filter
    Jan 21 18:20:14 slbd[1435]: Service Wan1BalanceWan2 changed status, reloading filter policy
    Jan 21 18:20:14 slbd[1435]: ICMP poll failed for 64.235.192.30, marking service DOWN
    Jan 21 18:19:04 check_reload_status: reloading filter
    Jan 21 18:18:29 slbd[1435]: Service Wan1FailoverWan2 changed status, reloading filter policy
    Jan 21 18:18:29 slbd[1435]: ICMP poll succeeded for 64.235.192.29, marking service UP
    Jan 21 18:18:26 check_reload_status: reloading filter
    Jan 21 18:18:23 slbd[1435]: Service Wan1FailoverWan2 changed status, reloading filter policy
    Jan 21 18:18:23 slbd[1435]: ICMP poll failed for 64.235.192.29, marking service DOWN
    Jan 21 18:13:22 check_reload_status: reloading filter
    Jan 21 18:12:47 slbd[1435]: Service Wan1FailoverWan2 changed status, reloading filter policy
    Jan 21 18:12:47 slbd[1435]: ICMP poll succeeded for 64.235.192.29, marking service UP
    Jan 21 18:12:43 check_reload_status: reloading filter
    Jan 21 18:12:42 slbd[1435]: Service Wan1FailoverWan2 changed status, reloading filter policy
    Jan 21 18:12:42 slbd[1435]: ICMP poll failed for 64.235.192.29, marking service DOWN

    The SS6520s are in router mode for 2 reasons
    Supply a PPPoE client and allow wireless internet access bypassing pfsense.

    Any suggestions besides picking a different monitoring IP?



  • the standard workaround for dynamic ip addresses is to put in a simple (maybe Linksys) router in front of the pfSense.

    You might do a traceroute and pick the next hop as a gateway.  it might work.

    Dynamic gateways! wow. what will ISPs think of next to hassle us?


Log in to reply