WIFI Link between two pfsense - VPN failover
-
Hello,
We have two sites which are connected through a WIFI link (Bridge).
We now want to create a failover for this link through a VPN tunnel.SETUP:
SITE A
WAN
LAN 10.0.0.0/20
LINK 172.16.32.2
VPN 172.16.2.2
STATIC ROUTE 10.0.32.0/20 172.16.32.1SITE B
WAN
LAN 10.0.32.0/20
LINK 172.16.32.1
VPN 172.16.2.1
STATIC ROUTE 10.0.0.0/20 172.16.32.2The static routes are there since the beginning, before we had the VPN tunnel.
Now with the VPN tunnel it would be nice if we could create a second route for the same networks but with priority.
Pfsense does not support routes with metrics.I tried now to specify the VPN gateway for the 10.0.32.0/20 network on a rule, which works. The only problem is that the traffic which is coming back from the 10.0.32.0/20 network towards 10.0.0.0/20, follows the static route defined on the pfsense and thus is send back over the WIFI link. This does not work.
How can I solve this?
In the end we want to have a gateway failover group with the WIFI link and the VPN tunnel.
Thanks a lot!
-
I tried already to create on the other site as well a firewall rule with the gateways configured. I also removed the static route.
Problem is that these rules don't get evaluated because of the states for traffic coming back.I don't know if what I want to achieve is possible at all.
Thanks!