Strange Routing Issue

razorhazor

Not sure whats going on here but I have the following setup:

WAN (ADSL Provider 1) OPT1 (ADSL Provider 2)
\ /
–----------------------------------------------
PFSense (192.168.3.1)
|
Switch
|
PC 1 PC2

The Load Balancing multi-WAN setup is fine, both show online, however I loose internet access on PC 1 (including ping'ing everything apart from 192.168.3.1), but will have access fine on PC2, then after a while it will swap round!?

I have the following firewall rules:

LAN:
Proto Source Port Destination Port Gateway Schedule Description

- - - - balancedLAN Default LAN -> internet

WAN:
TCP/UDP * * 192.168.3.2 16889 * NAT
TCP/UDP * * 192.168.3.3 16888 * NAT

OPT1:
TCP/UDP * * 192.168.3.2 16889 * NAT
TCP/UDP * * 192.168.3.3 16888 * NAT

The firewall logs dont seem to fill up with any blocked traffic from these 2 IP's.

It doesnt seem to make sense to me!

Any help would be greatly appreciated!

Matt

Perry

Did you tick sticky connections?

razorhazor

@Perry:

Did you tick sticky connections?

Yes I did, to try and get round issues with Online Banking websites etc monitoring the IP address and logging me out when the load balancer uses the 2nd connection.

Is there a known issue?

Cheers
Matt

Perry

yes http://forum.pfsense.org/index.php/topic,8957.0.html

hoba

To get issues with online banking solved just create a rule for https traffic that will use a failover pool instead of balancing. These applications won't cause much load so it's no problem to have them only at one wan and they will still be available if one of the wans go down this way. At my setups I have a portsalias and a hostsalias for such ports and destinations that don't work with loadbalancing. It's easy to just add ports or IPs later this way.

razorhazor

@hoba:

To get issues with online banking solved just create a rule for https traffic that will use a failover pool instead of balancing. These applications won't cause much load so it's no problem to have them only at one wan and they will still be available if one of the wans go down this way. At my setups I have a portsalias and a hostsalias for such ports and destinations that don't work with loadbalancing. It's easy to just add ports or IPs later this way.

Excellent advice, thanks for that, works perfectly now…