<?xml version="1.0" encoding="UTF-8"?><rss xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:atom="http://www.w3.org/2005/Atom" version="2.0"><channel><title><![CDATA[No Internet access after successful failover?]]></title><description><![CDATA[<p dir="auto">I have  a normal WAN connection (GW_WAN) and a 3G surfstick connection (GW_OPT8), also intended to be used as WAN.<br />
I put both in a gateway group called WAN_FAILOVER:</p>
<blockquote>
<p dir="auto">GW_WAN  Tier1 (Monitor IP 8.8.4.4)<br />
GW_OPT8 Tier2 (Monitor IP 8.8.8.8)</p>
</blockquote>
<p dir="auto">Trigger level is member down.</p>
<p dir="auto">Additionally I enabled "Allow default gateway switching" in System - Advanced - Miscellaneous.<br />
In the firewall rules on the VLAN interface where my compuster is connected to, I have set the WAN_FAILOVER group as gateway.</p>
<p dir="auto">For testing the failover I removed the WAN (GW_WAN) ethernet cable. System log then looks like this:</p>
<blockquote>
<p dir="auto">Jan 12 19:42:32 php: : MONITOR: GW_WAN is down, removing from routing group<br />
Jan 12 19:42:32 php: : Default gateway down setting GW_OPT8 as default!<br />
Jan 12 19:42:19 apinger: ALARM: GW_WAN(8.8.4.4) *** down ***</p>
</blockquote>
<p dir="auto">Routing table also gets updated:</p>
<blockquote>
<p dir="auto">default 10.64.64.0 UGS 0 184 1492 ppp0</p>
</blockquote>
<p dir="auto">Any idea why it isn't working? Thanks!</p>
]]></description><link>https://forum.netgate.com/topic/51909/no-internet-access-after-successful-failover</link><generator>RSS for Node</generator><lastBuildDate>Sun, 11 Oct 2026 02:37:55 GMT</lastBuildDate><atom:link href="https://forum.netgate.com/topic/51909.rss" rel="self" type="application/rss+xml"/><pubDate>Sat, 12 Jan 2013 18:41:28 GMT</pubDate><ttl>60</ttl><item><title><![CDATA[Reply to No Internet access after successful failover? on Sun, 13 Jan 2013 10:52:17 GMT]]></title><description><![CDATA[<p dir="auto">Abdsalem , thank you very much for your reply! I meanwhile foudn the error: On Firewall: NAT: Outbound the manual rule creation was enabled (needed e.g. if one wants static ports, useful for VoIP). There I only had rules for the normal WAN interface, duplicating those rules and replacing the WAN interface with the failover interface made everything work :-) Also one doesn't need the gateway group and WAN_FAILOVER group as gateway in the firewall rules when having only 2 WAN interfaces. I guess those options are for more advanced things, e.g. 3 WAN interfaces where it isn't clear which one shall be used when the primary one fails.</p>
]]></description><link>https://forum.netgate.com/post/372415</link><guid isPermaLink="true">https://forum.netgate.com/post/372415</guid><dc:creator><![CDATA[srynoname]]></dc:creator><pubDate>Sun, 13 Jan 2013 10:52:17 GMT</pubDate></item><item><title><![CDATA[Reply to No Internet access after successful failover? on Sun, 13 Jan 2013 01:44:21 GMT]]></title><description><![CDATA[<p dir="auto">Routing looks fine, have you defined the interfaces to use for the dns servers, within General Settings?</p>
<p dir="auto">Make sure that they are set and also make sure they are leaving out of the correct interface i.e</p>
<p dir="auto">dns server              use gateway<br />
8.8.4.4                  wan<br />
8.8.8.8                  opt8</p>
<p dir="auto">If you check your routing table you should see</p>
<blockquote>
<p dir="auto">Destination Gateway Flags<br />
8.8.8.8 10.64.64.0 UGHS</p>
</blockquote>
<p dir="auto">Let us know how you get along</p>
]]></description><link>https://forum.netgate.com/post/372390</link><guid isPermaLink="true">https://forum.netgate.com/post/372390</guid><dc:creator><![CDATA[Slam]]></dc:creator><pubDate>Sun, 13 Jan 2013 01:44:21 GMT</pubDate></item></channel></rss>