2 ISP+loadbalancing+failover



  • Hai I am New to Pfsense.(networking)..I have some basic questions..pls help me…

    In my office we have 2 ISP connections.We want Loadbalance with failover support.We have two pulic static IPs which NAT to our network range ,ie)192.168.0.6 and 192.168.0.10 which is connected to a switch.
    My ISP details are
    ISP1
    Static IP-131.117.140.230 which is NATed to 192.168.0.6
    Sub mask-255.255.255.240
    Gateway-131.117.140.1
    Primary DNS-201.197.71.5
    Secondary DNS-201.127.64.6
    ISP2
    Static IP-61.19.38.24 which is NATed to 192.168.0.10
    Sub mask-255.255.255.0
    Gateway-61.19.38.1
    Primary DNS-203.11.127.8
    Secondary DNS-202.171.13.77

    I am using 1.0.1 SNAPSHOT -02-21-2007

    Ok these are my simple questions
    What is my WAN ip and gateway
    What is OPT1 ip and gateway
    In the client machine which is the gateway(…….I think pfsense’s LAN IP)
    Where are the options that I can enter the two ISP’s DNS server….(i found only found one in general options.)

    Is it is necessary that WAN,OPT1 and LAN need different network range.

    In Load balancing tab when I add a IP ADD into the pool its not workind…and when I save that page a error showing Server list needed…I can’t find a field named server list…
    Thanks





  • Nice to see a reply….i go through that link but it uses DHCP but i have static IP.which version  works loadbalancing error free..??(or i configured incorrectely).....
    Thanks



  • Most likely, you configured wrong. I am a little confused, what do you mean the Static IP from your ISP is NATed to another IP? You WAN Public IP for ISP1 is 131.117.140.230 and ISP2 is 61.19.38.24. There is no need for NAT unless you have servers or something that needs to be accessed from outside your network. Also, on a side note, are you an IT for this office or just an employee?



  • i know not mutc about NAT or anything…i am not in IT field....my company need loadbancing to be implemented....so i search net found pfsence....so i try for it...i am a begginer in this field.....



  • I see. I am working on load balancing too but having problems. OK, lets look at your info you posted.

    @wings:

    ISP1
    Static IP-131.117.140.230 which is NATed to 192.168.0.6
    Sub mask-255.255.255.240
    Gateway-131.117.140.1
    Primary DNS-201.197.71.5
    Secondary DNS-201.127.64.6
    ISP2
    Static IP-61.19.38.24 which is NATed to 192.168.0.10
    Sub mask-255.255.255.0
    Gateway-61.19.38.1
    Primary DNS-203.11.127.8
    Secondary DNS-202.171.13.77

    The static IP is the public IP that is given to you by the ISP. You don't need to NAT it. It should go right from the modem to the computer. To have load balancing work you need a minimum of 3 NICs (Network Interface Cards). The link that was posted earlier is a good reference, there is a lots of info that can be used. You WAN IP and Gateway would be one of the ISP Static IP and Gateway (doesn't matter what order) but you need to make sure that you plug that ISP modem into the correct card or they won't talk to each other. I will try and make up a drawing, sometimes visual aid helps. Can you explain your set up a little?



  • Thank you for helping me…… I will explain best of my knowledge.I have a pc with 3 nic..We have around 30 client machines. We have two static IP131.117.140.230 and 61.19.38.24.But we accessing internet through 192.168.0.6 and 192.168.0.10 as gateways(I don’t know how ISP provider translate  their IP to our networking range…I think that is NATing.).At a time I will get only one line for testing.
    I connect 131.117.140.230 line to WAN interface.and its gate way is 131.117.140.230.
    (but I still don’t know how we connect with 192.168.0.6….may be some settings in modem).My pfsense LAN ip is 192.168.1.1.Our network is 192.168.0.0/24.Right now I want to connect to the internet through my pfsense LAN as gateway.(First I have to connect to internet with one connection then only Loadbalancing)..



  • Hmm. How is the internet coming in (meaning does it go to a modem then a router/gateway) and what kind is it (cable, DSL, T1, Fiber, etc…)? It sounds like they have two gateways that are plugged into the lines. Similar to this pic:

    http://doc.pfsense.org/images/5/5e/RouterDiagram.png

    So it is changing it to an internal IP. If that is so, use an IP in the same range and the 192.168.0.6 or 192.168.0.10 in the gateway (depending on which one it is).



  • Internet is coming through a modem/router.I think that device is DSL…………

    Ok then you are saying is gateway is in the range of 192.168.0.6 or 192.168.0.10…depending on which is connecting to WAN interface…Then what is the the static IP in(pfsense interface:WAN menu).In that diagram you shows ,the two WAN connections are different network range…is it necessary…..(because my network and ISP gateway are in the same network range.)……

    Give me some tips for this connections,…..means which are the menus to edit….i just want browse internet through my pfsense LAN as gateway….(now with one connection ..later two connection Loadbalancing+Failover……..sound good… ;D..)



  • The numbers are different, yes. I did make a doc file that has a drawing with your info but I need to copy it and make it into an image so I can post them. Hope it will help once I do.



  • That's a great news…......i am waiting for ur doc.... :D



  • OK, I have 2 possibilities and what I believe your current network is like. Possibility 2 is if you can ping the gateway and want to remove the routers. Possibility 1 is if you want to keep the routers. Depending on how everything is configured in the routers will determine which one to use. Right now I am half and half. One of my lines gos from the gateway (or modem is you want) to pfSense while my other one is on a router going to pfSense. Possibility 1 might be the best way to set this up. If anyone has any comments feel free to post them one what you think.








  • You did a great job man………. :D ;D ;D ;D ;D ;D

    In diagram1 shows router..but we don’t use any router…so I think my solution is diagram 2.I think I have to change the setting of that modem so that I can use my public IP (131.117.140.230 and and gateway as 131.117.140.1).Now we using gate as 192.168.0.6.(I have to call ISP providers…..because modem settings are complicative…)…This is my plan any suggestions..

    Mr.KDB9000 I am very delighted to see ur response…and for helping…  :D



  • Oh, it is changed at the modem. OK, so you could go with the last one and maybe still use the 192.168.0.XXX numbers. Well i would just say play around with it. I know there is a router in there somewhere. Good luck.


Log in to reply