Navigation

    Netgate Discussion Forum
    • Register
    • Login
    • Search
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search

    Multi WAN OpenVPN behaviour after recovery from failover

    OpenVPN
    2
    3
    1463
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • A
      ajayr last edited by

      Hi all,

      I have two Internet gateways:
      WAN - Faster line
      OPT1 - Slower line

      OpenVPN client is running on LAN. Failover is setup with WAN as Tier 1 and OPT1 as Tier 2. Failover works perfectly, whenever a line goes down, OpenVPN connectivity is restored through the other other line. However, when both the connections are back up again, OpenVPN does not always seem to use WAN (the faster line) for passing traffic.

      In case WAN goes down all OpenVPN traffic switches to OPT1. However when WAN comes back up, I would like OpenVPN to use WAN to pass all traffic, this doesn't seem to happen automatically.

      Any ideas?
      Thanks!

      1 Reply Last reply Reply Quote 0
      • P
        phil.davis last edited by

        What pfSense version?
        OpenVPN server or client bound to a gateway group should fail-over and fail-back on pfSense 2.1

        As the Greek philosopher Isosceles used to say, "There are 3 sides to every triangle."
        If I helped you, then help someone else - buy someone a gift from the INF catalog http://secure.inf.org/gifts/usd/

        1 Reply Last reply Reply Quote 0
        • A
          ajayr last edited by

          @phil.davis:

          What pfSense version?
          OpenVPN server or client bound to a gateway group should fail-over and fail-back on pfSense 2.1

          pfsense version 2.0.3-RELEASE (amd64)
          OpenVPN client running in pfsense. Failover works well, no problems. When the failed WAN interface comes back online, traffic is still routed through secondary OPT1 and does not switch back to faster WAN.
          I should switch to 2.1?

          1 Reply Last reply Reply Quote 0
          • First post
            Last post