WIFI Link between two pfsense - VPN failover


  • Hello,

    We have two sites which are connected through a WIFI link (Bridge).
    We now want to create a failover for this link through a VPN tunnel.

    SETUP:

    SITE A
    WAN
    LAN 10.0.0.0/20
    LINK 172.16.32.2
    VPN 172.16.2.2
    STATIC ROUTE 10.0.32.0/20 172.16.32.1

    SITE B
    WAN
    LAN 10.0.32.0/20
    LINK 172.16.32.1
    VPN 172.16.2.1
    STATIC ROUTE 10.0.0.0/20 172.16.32.2

    The static routes are there since the beginning, before we had the VPN tunnel.
    Now with the VPN tunnel it would be nice if we could create a second route for the same networks but with priority.
    Pfsense does not support routes with metrics.

    I tried now to specify the VPN gateway for the 10.0.32.0/20 network on a rule, which works. The only problem is that the traffic which is coming back from the 10.0.32.0/20 network towards 10.0.0.0/20, follows the static route defined on the pfsense and thus is send back over the WIFI link. This does not work.

    How can I solve this?

    In the end we want to have a gateway failover group with the WIFI link and the VPN tunnel.

    Thanks a lot!


  • I tried already to create on the other site as well a firewall rule with the gateways configured. I also removed the static route.
    Problem is that these rules don't get evaluated because of the states for traffic coming back.

    I don't know if what I want to achieve is possible at all.

    Thanks!