Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    PFsense 1.2.3 failover

    Scheduled Pinned Locked Moved Routing and Multi WAN
    5 Posts 2 Posters 2.3k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • S
      simoon
      last edited by

      I am trying to configure my firewall to failover from a T-1 (static) to cable (dynamic).

      I have created my load balance pool and 2 failover pools. They are both online. But when I test by disconnecting the T-1 connection, not only doesn't it failover, but both my gateways go offline.

      I've been though as many online tutorials I can find. Some mention outbound NAT, which I configured, but it didn't make any difference. Not sure if I need to add any rules?

      I have a decent amount of firewall experience (higher end SonicWall, old Checkpoint), but I'm new to PFSense.

      Thanks

      1 Reply Last reply Reply Quote 0
      • M
        Metu69salemi
        last edited by

        have you read this

        1 Reply Last reply Reply Quote 0
        • S
          simoon
          last edited by

          @Metu69salemi:

          have you read this

          Thanks for the response.

          Yes, the link you provided was one of the tutorials that I used for reference.

          I was able to get it working. Interesting enough, I just deleted any configuration that was related to load balance and failover, and recreated them. It started working after that.

          But now I have another issue. When I disconnect our primary internet connection, it fails over to our secondary and the internet connection stays up. But my ipsec tunnels no longer work. They still show that they are up on the status page, but I can't ping any server on the other side.

          I am assuming that there is a rule that needs to be created.

          Thanks

          1 Reply Last reply Reply Quote 0
          • M
            Metu69salemi
            last edited by

            can't help you with that, i'm not using either one.

            1 Reply Last reply Reply Quote 0
            • S
              simoon
              last edited by

              I think I may have figured it out.

              I won't be able to test until tomorrow morning, before the rest of the employees get in. I don't test config changes during business hours.

              If it's what I think it is, I will be embarrassed  :-[.

              1 Reply Last reply Reply Quote 0
              • First post
                Last post
              Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.