WAN loses connectivity
Erik_CH last edited by
I have same issue. My NAT is on automatic - so NAT hasn't to do with this. But short description of my config and issue:
0. Hardware/Software: virtual environment on KVM (Proxmox) installed pfsense 2.2.4
1. two Gateways with static IP address (first: fiber [20/20 Mbit], second: cable modem [80/7 Mbit])
2. weight between fiber / cable 1:4
3. Use sticky connection = on (System - advanced - Miscelaneus)
4. Monitoring to external DNS servers each
5. Routing Group "MGW_inet_balanced" with Tier 1 on both gateways.
6. FW rule with Gateway = "MGW_inet_balanced"
After starting pfsense it works fine. The traffic is distributed to both gateways. After some minutes / hours the second gateway goes offline with 100% package loss. It's not apinger problem. The gateway looses really all packages. If I try to ping from "Diagnostics - ping" with "source" = second gateway there no package transfer also.
Further I have a backup pfsense with CARP running in parallel on a APU board from PC-engines. Also there without any data load the second interface goes offline. Also there no ping through offline Gateway possible.
If I set the routing group redundant without load balancing (first GW = Tier 1, second GW 0 Tier 2) then it works fine without package loss.
Until now I haven't found a solution. Does somebody know if there is a bug or a miss configuration?
cmb last edited by
You don't have the same issue as that other thread, so I split this into its own thread.
Your WAN's legitimately going down. Troubleshoot why that is. Losing link on the NIC? Something with an IP conflict? Losing connectivity to your ISP?
Erik_CH last edited by
Thanks for your answer.
Unfortunately none of these what you mentioned. This was first what I checked. If I configure the gateways with Tier 1 for one gateway and Tier 2 for the other one then it works really stable. There is absolutely no interruption for days now. Neither NIC nor ISP disconnect. If I change back to Tier 1/Tier1 then second gateway will loss 100% packages after a certain time. The cable modem works if I connect it directly.
I added my routing groups and my fw rules.
At a temporary solution I route a part of ports to gateway 1 and all others to gateway 2.