• Hi guys,

    I hope someone can help me with this issue.

    I have a client who has purchased 2 new WAN connections.

    They use to have there original connection with this same ISP provider and it would assign an IP to there cisco router via DHCP.

    Since upgrading the service with this same provider they were then given a gateway and 5 public IP's.  1 is assigned to the gateway, the other 4 are open for use.

    They also purchased (without me knowing or even talking to me) a second "backup" connection from another provider that works with DHCP.

    They do require the Cisco to stay as they have 3 remote offices and mobile warriors who connect via the cisco VPN client to there CiTRIX server.

    What I am trying to do is leave the cisco as is.  and put a pfsense box in front of the cisco and supporting dual WAN connections.
    I would only require that pfsense switch from the primary connection to the backup in case the primary goes down(and for the last 2 weeks the ISP has had issues)

    Is there any way to do this?

    I was thinking of setting up the pfsense box as normal with dual wan connections,

    then simply plug the cisco into the back of the pfsense box with a crossover and hand out a lan IP address like 10.1.1.x to the cisco.
    Then I was thinking of setting up the first LAN ip addres it hands out DMZ from both wan connections.

    Would this work?
    Is this even possible or will I cause issues?


  • Yes you can do this with pfsense, you need to update build 1.0.1 though to get balance with failover working.  I am assuming you only want to use 1 IP address on the cisco box  :)

    I am currently running 1.0.1-SNAPSHOT-02-14-2007
    built on Sat Feb 17 07:44:14 EST 2007

    The wiki at http://doc.pfsense.org/index.php/Multi-Wan/Load-Balancing tells you how to do it.