Allow only 1 ip to use failover



  • My setup is as follows: 3 Interfaces (2 wan 1 lan), 3 vlans (100,200,300) . My 2nd wan connection is a 4G bridge (data is very expensive) I need to restrict it to only IP (computer) that if wan 1 goes out then that one IP can use wan2. I have spent 10 hours searching and testing with no luck.


  • Netgate

    Create a failover group with the cheaper link as tier 1 and the expensive link as tier 2.

    Be sure the cheaper link is marked as the default gateway.

    Right above the default pass rule that sends LAN net to the default gateway, place a rule with the source address of the host you want to be able to use the failover link and set the gateway to the failover group.

    ![Screen Shot 2015-05-13 at 12.02.42 AM.png](/public/imported_attachments/1/Screen Shot 2015-05-13 at 12.02.42 AM.png)
    ![Screen Shot 2015-05-13 at 12.02.42 AM.png_thumb](/public/imported_attachments/1/Screen Shot 2015-05-13 at 12.02.42 AM.png_thumb)
    ![Screen Shot 2015-05-13 at 12.02.19 AM.png](/public/imported_attachments/1/Screen Shot 2015-05-13 at 12.02.19 AM.png)
    ![Screen Shot 2015-05-13 at 12.02.19 AM.png_thumb](/public/imported_attachments/1/Screen Shot 2015-05-13 at 12.02.19 AM.png_thumb)



  • I understand a lot more to tell other people.