Navigation

    Netgate Discussion Forum
    • Register
    • Login
    • Search
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search

    Sites that don't like Dual Wan

    Routing and Multi WAN
    4
    5
    1036
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • D
      DualWaner last edited by

      Currently I have a dual WAN (ADSL2+) on an Intel Atom D2550 1.86Ghz running pfsense 2.2.3, however, certain websites don’t work under dual wan settings (i.e Banking sites) is there any way to get around this problem besides turning on and off a WAN each time I need to access these sites?

      1 Reply Last reply Reply Quote 0
      • J
        jackall last edited by

        What I have done is creating two routing groups, 1 called failover, and 1 called load_balancing

        In load balancing, all internet connections are Tier_1 (Trigger level, High Latency)

        In Fail Over the fastest connection is Tier_1, the second fastest is Tier_2 and so on (Trigger Level is Member Down)

        Than I created an ALIAS (called no_load_balancing) with all the sites hating the connection jumps

        Finally in Firewall rules just before your lan to any rule, insert a new rule as follows :-

        Action = Pass

        Interface = Lan

        Destination : Type Single host or alias, and add No_Load_Balancing (or whatever you called your alias)

        In advanced features, choose the Failover group as your gateway.

        I do not know if  this is the best way to do it, or if there is a simpler way, but it works for us

        J

        1 Reply Last reply Reply Quote 0
        • D
          DualWaner last edited by

          Thanks Jackall I give it a try.

          1 Reply Last reply Reply Quote 0
          • S
            SuperSpy last edited by

            I've noticed enabling sticky connections (System > Advanced > Miscellaneous) fixes a lot of websites that don't like the IP moving around on them, like banks.  In general, I just toggle it on when I need that site, and off when I'm done, as sticky connections also slows down sites that properly handle multi-wan, forcing them onto a single link.

            1 Reply Last reply Reply Quote 0
            • U
              ubit last edited by

              @jackall:

              In load balancing, all internet connections are Tier_1 (Trigger level, High Latency)

              In Fail Over the fastest connection is Tier_1, the second fastest is Tier_2 and so on (Trigger Level is Member Down)

              Than I created an ALIAS (called no_load_balancing) with all the sites hating the connection jumps

              Finally in Firewall rules just before your lan to any rule, insert a new rule as follows :-

              Action = Pass

              Interface = Lan

              Destination : Type Single host or alias, and add No_Load_Balancing (or whatever you called your alias)

              In advanced features, choose the Failover group as your gateway.

              I do not know if  this is the best way to do it, or if there is a simpler way, but it works for us

              J

              can you send screenshots of this settings please

              1 Reply Last reply Reply Quote 0
              • First post
                Last post

              Products

              • Platform Overview
              • TNSR
              • pfSense Plus
              • Appliances

              Services

              • Training
              • Professional Services

              Support

              • Subscription Plans
              • Contact Support
              • Product Lifecycle
              • Documentation

              News

              • Media Coverage
              • Press
              • Events

              Resources

              • Blog
              • FAQ
              • Find a Partner
              • Resource Library
              • Security Information

              Company

              • About Us
              • Careers
              • Partners
              • Contact Us
              • Legal
              Our Mission

              We provide leading-edge network security at a fair price - regardless of organizational size or network sophistication. We believe that an open-source security model offers disruptive pricing along with the agility required to quickly address emerging threats.

              Subscribe to our Newsletter

              Product information, software announcements, and special offers. See our newsletter archive to sign up for future newsletters and to read past announcements.

              © 2021 Rubicon Communications, LLC | Privacy Policy