Dual WAN with pfsense

 Dual WAN with pfsense

pfsense is a FreeBSD router OS that can be installed on embedded systems or PC/Server PC hardware. Its a free, open source customized distro based off of FreeBSD 7 specifically tailored for use as a firewall and router. Its one of the most secure router OS’s out there. Large corporation and universities use this router OS because of the stability, failover, and stacking capabilities. If you have heard of M0n0wall or IPCop then you should have an idea what pfsense is.

For my use I used the same exact hardware that I used to build the IPCop router that I reported on 3 posts ago.

List of Features

Firewall

State Table

NAT

Redundancy

Load Balancing

VPN

IPsec

RDD Graphs

And More. For a full listing see the complete features site

I will show you how to enable Load Balancing with Dual WAN on your pfsense router. Some may ask why would you need Dual WAN. Failover, incase you have mission critical data that needs to be accessed at all times like off site backup and for load balancing. Load balancing will balance the load (or bandwidth use) between your Internet links. Many companies do this to decrease latency and to get more bandwidth for many users while saving money.

I will assume you have pfsense loaded and you have already setup two WAN connections on your firewall.

  • Once this is complete visit services -> load balancer

image thumb Dual WAN with pfsense

  • Delete any pools that are there that do not work
  • Click image thumb1 Dual WAN with pfsense to enter a new pool.
  • Enter a pool name and description
  • Set the type to gateway

image thumb2 Dual WAN with pfsense

Now we need to add a monitor IP for the router to monitor the link status of the pool.

  • For the Monitor IP select WAN Gateway
  • In the Interface Name field choose WAN and click Add to Pool

image thumb3 Dual WAN with pfsense

  • Now Go back to Monitor IP and Select your OPT1′s Gateway
  • In the Interface Name Field choose OPT1 and click Add to Pool

image thumb4 Dual WAN with pfsense

You should see that the WAN gateway has a different gateway address then the OPT1 gateway. If not then pfsense will not work correctly. You will have to put a bridge between that interface to ensure pfsense has two different gateways. If you have trouble with this please contact me. Basically pfsense does not support the same gateway on multiple networks right now.

  • Click Save

Now go to Status -> Load Balancer to see if everything is working fine. It should report Online.

image thumb5 Dual WAN with pfsense

If you followed my directions and it does not show online after 15 minutes then that gateway may not respond to ICMP traffic. For your monitor IP use 4.2.2.1 which is an any cast DNS Server.

We must create NAT rules now.

  • Go to Firewall -> Nat -> Outbound
  • Enable AON

image thumb6 Dual WAN with pfsense

You should have a rule in there for the WAN to any Gateway already. This is automatically created. Now you need to enter one for OPT1

  • Click Add and Copy the WAN setup but the Interface will now be OPT1

image thumb7 Dual WAN with pfsense

  • Apply the Changes.

From here it may work but you may need to make one more change.

  • Go to Firewall -> Rules -> LAN
  • Edit your existing LAN net entry. Modify the gateway from default to the Load Balancer

It should look like

image thumb8 Dual WAN with pfsense

Your Done! What you can do to check to see if Load Balancing if working properly is try to go online. If you can get to Google then your Connection is working properly. Go to http://pfsense.org/ip.php and click refresh a couple of times. Your Public IP should switch back and forth. This means that load balancing if working. The reason your public IP should change is because the Load Balancing Feature works in a Round Robin fashion. Every new session is will oscillate between gateways. This also means that if you test your Internet Connection speed on www.speedtest.net you will not see the combined speed of both networks. You will see the combined speed when you use applications that use multiple sessions like peer to peer applications.

EDIT: if you have problems with the pools being uneven and you cannot figure it out even after deleting the pool and starting over flowing my directions then please see Greg’s comments below. He used Google and Yahoo as the Ping IP and configured the Pool using the “other” option.

EDIT2: Comments by SAM:

1. Go to System\routing. On the gateways tab add a gateway for each of your interfaces, eg: WAN and OPT1

2. Under System\routing. On the groups tab create a group and assign each gateway the priority of “Tier 1″, the trigger can be “member down”

3. Go to Firewall\rules. On the LAN tab, edit the default rule. Press the button for “Gateway” under advanced features and change it to the name of the gateway group you created in step 2.

You should be up and running.

This was confusing to find since dual wan was moved from Services\Loadbalancer to the System|Routing tab. Monitor IP’s are now configured on the gateway tab.

Edit 15 Mar 10: changed IP addr link to http://pfsense.org/ip.php

This entry was posted in Hardware, Secuirty. Bookmark the permalink. Trackbacks are closed, but you can post a comment.

68 Comments

  1. Meng
    Posted May 16, 2009 at 13:02 | Permalink

    Hi, very nice guide and i like it but somehow i’m having a bit trouble setting up OPT1-WAN2 to connect to the internet. If you don’t mind me requesting for your help on how to setup a second WAN and also some rules recommendation for WAN2 and LAN2. Thanks i hope to hear from you soon.

  2. Posted May 22, 2009 at 14:24 | Permalink

    Hey,
    No Problem. I am on the road right now. Send me an email. You can find my email around the site. You could also jump on my forum and we can have a topic started just for you. I would love you get your setup up and running as soon as possible.
    Start a new topic on the forum, this will work best because I’m still on the road.

  3. Scott
    Posted June 2, 2009 at 17:32 | Permalink

    Nice guide, it’s about time someone simplified this, a lot of the info regarding this is a little vague. One thing could you clarify the bridging solution to elimate the problem of both wans being on the same gateway, I assume this is only a problem with dynamic ip’s as with static ip’s couldn’t you use the ip itself as a monitor. I have two dynamically assigned ip’s on the same gateway
    am I right in thinking by a bridge you mean a cheap nat router between one of the wans and the pfsense box.
    Many thanks for all your fine work

  4. Posted June 3, 2009 at 12:12 | Permalink

    Hey Thanks for the Comment. One thing to note is that pfsense cannot currently support the same gateway on mulitple interfaces. There is an on going bounty that is currently working to fix this. We may see it in pfsense 2.0, but I don’t expect to see it any time soon.
    You could use any responsive IP as a monitor. That will work, however this is a seperate issue than gateway homage. Check out the forum on pfsense.org.
    To answer you sec0nd question, yes a small bridge would be a cheap NAT device. This is the only option that the pfsense moderators and devs offer to overcome the one gateway one interface limitation, untill a solution is developed. I used and old Linksys router with NAT enable and SPI disabled. I even put the NAT IP in the DMZ to ensure port forwarding remains simple and secure.
    Feel free to email me at any time if you want to chat. I am also on MSN and Yahoo Messeger almost all day. You can find my email around my site, check my forum.

  5. Greg
    Posted June 8, 2009 at 04:01 | Permalink

    My Wan gateway address is the same as the OPT1 gateway. I have two DSL lines from the same ISP. What is the trick to setup the bridge for this? By the way, the best and clear guide I’ve seen. Thank you in advance for your help.

  6. Posted June 8, 2009 at 05:34 | Permalink

    Hey Greg! Thank you for the compliment. The trick is to put a simple gateway between Opt1 and your second cable modem. Specifically I used an old Linksys Router.
    I assigned the old router a 10.0.0.0 address (something like 10.0.0.1) and enabled DHCP on it so that OPT1 address would be 10.0.0.2. Disable the firware and put 10.0.0.2 or your OPT1 address in the DMZ (let pfsense handle your port forwading).
    When you configure the Gateway for OPT1 just use the 10.0.0.1 address because the old linksys device is between the connection of your OPT1 and your Cable modem. That is the easiest and most secure way.
    Hopefully pfsense will support the same gateway in the future. Please reply to my email if you want furthur details. Take care.

  7. Posted June 22, 2009 at 02:06 | Permalink

    Hi Tom! Ok, it has been about twelve days since my changes to the load balance and is working just fine with one exception. I’ve notice that the load is uneven. Like, 3 to 1 ratio. For every 100mb on the WAN, the OPT1 is 25mb. Both NIC cards are the same and my ISP provider is the same company and I don’t have currently another choice. Also, both modems are the same model and connection speed. I have looked at pfSense forum readings and have yet to find a solution that works. I read someone’s comment to add one gateway more than once to the pool and that should take care of it, but the true is that it didn’t work. My assumption is that I must be missing some other configuration. Any thoughts?

  8. Posted June 22, 2009 at 03:05 | Permalink

    It could be two different things. I have experianced what you just described before and I fixed it by forcing the ratio. Check out http://forum.pfsense.org/index.php/topic,14333.0.html
    Even if the connections are the same you can still force the ratio so that you can get a balanced load.
    The other thing is it could be a miss configured firewall rule. I woult d also check your Outbound NAT, AON. Make sure the second interface is added.
    If it still doesn’t work, delete the pool and start over, try http://www.netlife.co.za/content/view/34/34/
    Good luck, let me know if you need anything else. Sorry I couldn’t give you a more specific answer but it could a couple things. Let me know if you get it working.

  9. Posted June 22, 2009 at 06:47 | Permalink

    Actually this link http://forum.pfsense.org/index.php/topic,14333.0.html is the one I’ve tried. The other link I’ve read too, but they are using TCP for Monitor IP and the only way I can use it is, if I change from Gateway to Server. What is the difference? My problem with pfSense is the lack of comments or help for every settings and sometimes I have to guess. I am not a firewall expert by any means. By the way, I have deleted the pool and started over few times already. If you need screenshots, I’ll be glad to email them to you. Thank you!

  10. Thomas
    Posted June 22, 2009 at 11:45 | Permalink

    Humm. Well I don’t have a pfsense box here with me know, just moved to TX, so I will have to refer you to the pfsense forums.
    To tell you the truth you will get a better answer there. Sorry, I don’t mean to push you to the forums but that’s where I believe you will get the best answer. Let me know what happens, that way I can warn other users of the issue on this post as well. Thank you Greg.

  11. Posted July 2, 2009 at 03:52 | Permalink

    Hi Tom! I finally figured out why the load balance was uneven. I removed WAN and OPT1 from the pool and added them back with the “other” option and used the yahoo.com ip address for the WAN and the goggle.com ip address for the OPT1. Now is balanced to the penny. It appeared that it worked before but intermittent when using the gateway addresses. Remember, I had a router in-between the modems and pfSense. I hope this brief makes sense. Thank you very much for your ealier help too!

  12. Posted July 18, 2009 at 15:55 | Permalink

    Hi Tom.. great guide. i able to do the balancer. i think.. but my problem is the internet access is running very-very slow. To complete the cnn.com it takes me about 3-5 minutes.. and at some places i even cannot access because the timed-out.
    my wan is using dhcp, opt1 also is dhcp. TQ

  13. Posted July 18, 2009 at 23:43 | Permalink

    hmmm. Is your internet connection that slow when you are not using dual WAN? Also do a speed test at http://www.speedtest.net and try it three times. Tell me what you get all three times.

  14. Posted July 26, 2009 at 01:11 | Permalink

    Ok, so pfsense doesn’t support the same gateway on multiple interfaces. I have three external if’s and they all need to have the same gateway. Complcated, I know, but I am using a STUPID ATT UVERSE modem which doesn’t allow to assign more than one ip to the same interface. Therefore, to utilize more than one static IP, you need a FW that has multiple external interfaces. Obviously, each of these interfaces will need to have the same gateway. I don’t know of anyway to get around this. You mentioned “bridging” in your article. If I bridge the OPT if’s with the WAN if, would that do the trick? I am going to experiment with that! Let me know if you have some thoughts. Thanks!

  15. Posted July 26, 2009 at 01:48 | Permalink

    Luke,
    Not brigding with pfsense but using a linksys router as a bridge between each interface.
    For example you have Three interfaces. Two of those interfaces will need to have a different gateway address than the first. So what pfsense developers suggest is putting a linksys router in between your other interfaces to NAT the gateway to a different address.
    if 1: Gateway and address from ISP DHCP
    if 2: Gateway and address from linksys router, linksys router gets gateway from ISP

    if 3: same thing as two.

    There will be a fix for multiple gateways on pfsense in the future but that functionality is not here yet.
    Check out this link: http://forum.pfsense.org/index.php/topic,10069.0.html
    and for more information on your NAT devices check out: http://forum.pfsense.org/index.php/topic,17425.msg90259.html#msg90259

  16. Posted July 26, 2009 at 04:18 | Permalink

    Well, I did a work around with a couple cheap routers. Feels “hacked together” but it works… :)

  17. Posted July 26, 2009 at 13:06 | Permalink

    Yep. Its the only way around right now. Hopefully we will see a better fix soon.

  18. Mike
    Posted August 12, 2009 at 02:55 | Permalink

    Hi,

    I’ve been searching for answers in a couple of days now but seems to have no luck. I have a problem in WAN failover, I am trying to do what is on the guide and some other HowTo’s but it never worked for me or something might have miss on the config.

    I follow this guide to setup my 2 WAN and everything runs smoothly, when I tried to simulate a downtime on my WAN by disconnecting the LAN cable, my OPT1(WAN2) didn’t respond and it is sill “Offline”. When I put it back on, both are running online. Does OPT1 depends on WAN?

    Have you guys experience like this? Please, i need help.

    Thanks.

  19. Posted August 12, 2009 at 06:03 | Permalink

    I’m wondering Mike, what you have under your AON rules. Also search http://forum.pfsense.org/index.php?board=36.0 for your answer. You can also post there and someone will, I’m sure, help you.

    I haven’t fully been able to replicate your problem so there must be a missconfiguration somewhere.

  20. Mike
    Posted August 12, 2009 at 20:13 | Permalink

    Thanks Tom.

  21. neowarcic
    Posted August 24, 2009 at 03:49 | Permalink

    I have problems to, with opt1 i can not add ips to work i try everithing but it wont ping opt1 gataway.

    Regards

  22. Posted August 24, 2009 at 05:51 | Permalink

    Neowarcic,
    Double check your firewall settings on both interfaces. Also do you have AoN enabled? When I cannot get a config working, I always start over. Let me know if you get it.

  23. neowarcic
    Posted August 24, 2009 at 06:00 | Permalink

    actually i cant ping internet from opt1, I try to change ethernet device but nothing .

  24. neowarcic
    Posted August 24, 2009 at 06:05 | Permalink

    First try was to load 2 modems with same subnets, after that i was use mikrotik on some p3 comp to make a router and i have got difrent subnet.
    I have to say that i burn 2 modem trying to make that all :) I dont know what i need to make in firewall because when i put ip on wan and turn on dhcp on opt1, do i need to have output ping?

  25. kumar
    Posted September 19, 2009 at 11:06 | Permalink

    Hai
    I have set up one pfsense box with 2 WAN inetrfacess(different ISPs) and one LAN interface for internal distribution. While one ISP is on a DHCP..the second icomes with a static ip. I am unable to add this static ip based ISP to the pfsense box..any hep will be apprciated

  26. Posted September 21, 2009 at 07:11 | Permalink

    Hey Kumar, sorry for the wait.
    Have you assigned the static to one if and tried DHCP on the other? What happens when you manage the IF and change it to static?

  27. rd
    Posted November 18, 2009 at 22:00 | Permalink

    Nice Guide.
    So if I just want a backup of my WAN connection without Loadbalancing, what should be the pool monitor status ?

    thnks

  28. Kevin
    Posted November 30, 2009 at 01:10 | Permalink

    Hi, I have three identical modems from the same ISP and they all have the same speed. I know about the problems of having the same gateway so modems 2 and 3 both have a router in between them and pfsense. My problem is that during failover, the load balancer status screen correctly shows which modems are offline but sometimes I can’t surf the Internet even one modem is online and sometimes it does work.

    My monitor ip addresses are 4.2.2.1, 4.2.2.2, and 4.2.2.3, respectively.

    What could be the problem with this?

  29. Kevin
    Posted December 3, 2009 at 21:17 | Permalink

    Anyone please reply?

  30. Posted December 4, 2009 at 15:31 | Permalink

    Hey Kevin,
    sorry for the late reply. I am out on a military exercise thousands of miles from my home so I was not able to reply right away. I don’t have much time right now to sit down and think about your issue. Right now I would suggest getting on the pfsense forums until I can get back and work with you on this. If you figure out the issue before I get back, comment about it and I will put the fix in the post. Thank you.

  31. Kevin
    Posted January 16, 2010 at 21:18 | Permalink

    Hi Tom. Unfortunately, the pfsense forum is not of much help for me either. I hope you can personally help me in setting up my 3-WAN (same ISP) pfsense setup. I hope you are done with the military exercise by now.

    Thanks mate.

  32. jo dumars
    Posted January 18, 2010 at 06:03 | Permalink

    Hi all,
    I followed all the steps above and works like a charm. Thank you for the guide!!

  33. Mike
    Posted January 26, 2010 at 12:00 | Permalink

    Hey, anyone know how to get dual WAN working with pfsense 2.0? Chris has changed everything around and now the “LoadBalancer” option is for server load balancing not connection balancing so the “Pools” do not work the way they are described in here. I think “Pools” in 2.0 are “Gateway” or “Gateway Groups” Not too sure. Like the rest, for an open source community, the PFSense forum falls flat on its face for any sort of help.

  34. Posted January 26, 2010 at 14:25 | Permalink

    What is the benefit of running 2.0? 2.0 is based on an old freeBSD build 1.2.3 is based on a newer build. If you want security and stability I would recommend going to 1.2.3, 2.0 is still experimental and is going through a complete rewrite.

  35. psd_steve
    Posted January 30, 2010 at 19:07 | Permalink

    I played with 2.0 (to include the 24 Jan Build) It is definitely still beta. Lots of things simply do not work. Using this guild I got my 1.2.3 rocking on multi-wan with the load balancer. Great guild, thank you

    Steve

  36. Tasis
    Posted February 7, 2010 at 05:04 | Permalink

    Hi Mike, Tom,

    I have a question following up an earlier comment by Mike and it concerns fail-over of incoming connections (outgoing connections work fine every time via load-balancing gateways).

    We have a simple pfSense ver. 1.2.3 setup with two outgoing interfaces WAN and WAN2|OPT1. We also offer NAT port mapped services from the inside (over the pfSense LAN interface) like HTTP and IMAP.

    Our concern is that these internal services should be available either through WAN or WAN2, if either one goes down.

    However, in our tests when we bring WAN down, WAN2 ceases to respond. It appears that pfSense is missing its default gateway (since WAN is down) and fails to respond to any incoming requests over WAN2.

    This assumption is further supported by doing the following test:

    - bring WAN down
    - cannot ping WAN2 from IP 1.2.3.4
    - add static route to pfSense with gateway WAN2 for IP 1.2.3.4
    - pinging WAN2 from IP 1.2.3.4 now works!
    (WAN interface is still down)

    Is there anyway to have multiple default gateways in pfSense? Or would you recommend any other solution?

    Thank you, Tasis

  37. german
    Posted February 9, 2010 at 10:52 | Permalink

    Muchas gracias fue de mucha ayuda sus instrucciones

  38. Posted February 11, 2010 at 11:15 | Permalink

    Anyway i was looking at this www page and find it to be quite useful. I would greatly be thankful for any assistance.

    Just lately, Louisville has came about as a major gathering place for the health care and healthcare sciences industries. Louisville has been key to developments in heart and hand surgical procedure as well as cancer therapy. Quite a few of the first man made cardiovascular system transplants were conducted in Louisville. Louisville’s booming downtown medical research university includes the brand-new $Eighty-eight thousand rehabilitation facility, and a health sciences research and commercialization park which, in relationship with the University of Louisville, has lured nearly Seventy top rated people and researchers. Louisville is usually also house to Humana, one of the nation’s premier health insurance coverage businesses.

    Louisville is home to various major firms and organizations.

  39. Viktor Petersson
    Posted February 26, 2010 at 02:56 | Permalink

    I’m having the exact same issue as Tasis. I’ve tried searching the pfSense forum, but unfortunately it is filled with questions without answers.

  40. Posted February 26, 2010 at 07:59 | Permalink

    Make sure your resetting the states or rebooting.

  41. Tasis
    Posted March 2, 2010 at 08:38 | Permalink

    Thanks Tom,

    but we would like this to be as automatic as possible, ie not to require any human intervention to reset the states or to reboot the pfSense box.

    Fail-over gateways in Linux are not so difficult to achieve: you just add two default gateways and the kernel can detect if the primary fails and change to the second one (you can even define the timeout value in /proc/sys/net/ipv4/route/gc_timeout), see http://www.linux.com/archive/articles/113988 (one of many articles).

    Would this be possible to achieve using pfSense? There is no way to define a second gateway on the graphical interface and I wouldn’t like to start changing the XML configuration unless I knew what I was doing…

    Thanks again for any help you could provide!

  42. Posted March 2, 2010 at 20:28 | Permalink

    Right. The reason you have to reset the states or reboot is to enforce the settings you have made. Pfsense will hold on to connections until they timeout and thus your rules will not apply. That is why the pfsense team recommends you reboot or reset the state table. This applies to firewall settings.

    It is very possible in pfsense. Ref: http://forum.pfsense.org/index.php/board,21.0.html

    if the physical interface is there then you can add one. Take a look at the forum link I provided. There are many tuts and walk-throughs that will help you.

  43. Nirudha Perera
    Posted March 6, 2010 at 14:42 | Permalink

    Hi, we tried a setup like this to load balance over 4 ADSL links. However we found more and more websites and MS Live Messenger seem to have issues with requests coming from multiple source IP addresses. Have you experienced this?

  44. Posted March 6, 2010 at 21:43 | Permalink

    That could happen depending on how a company handles traffic. Use sticky connections to fix it.

  45. Nirudha Perera
    Posted March 9, 2010 at 22:33 | Permalink

    Hi Tom, do you mean it depends on the ISP? In my case I have a squid proxy between the pfsense box and the user PC’s so I don’t think sticky will be a solution for me, though it should fix it for others. Waiting for the next PFsense version and hoping it will have a squid package which can send traffic via multiple links.

  46. Posted March 9, 2010 at 23:12 | Permalink

    Not the ISP but the server, such as the messenger server. Yeah, you can wait for the next version but I don’t know when that will be. You could always run the beta.

  47. Sam
    Posted March 15, 2010 at 04:17 | Permalink

    Tom, thanks for the useful guide.

    In response to the person asking how to setup dual wan in pfsense 2.0(beta) here is what to do.

    1. Go to System\routing. On the gateways tab add a gateway for each of your interfaces, eg: WAN and OPT1

    2. Under System\routing. On the groups tab create a group and assign each gateway the priority of “Tier 1″, the trigger can be “member down”

    3. Go to Firewall\rules. On the LAN tab, edit the default rule. Press the button for “Gateway” under advanced features and change it to the name of the gateway group you created in step 2.

    You should be up and running.

    This was confusing to find since dual wan was moved from Services\Loadbalancer to the System|Routing tab. Monitor IP’s are now configured on the gateway tab.

    Pfsense 2.0 isn’t ready for prime time but it has some nice features I couldn’t resist.

  48. Arun
    Posted August 6, 2010 at 19:12 | Permalink

    Hi every thing works as you said.But i dont know how to fix sticky sessions.Many websites refuse the connection due request going out from multiple IP addresses…I dont find any option called Sticky sessions in pfsense.Can you please tell me how to enable it..

  49. Posted August 6, 2010 at 20:57 | Permalink

    You didn’t bond the two WANs into one so every website sees only one IP, either WAN1 or WAN2. That rotates in a round robin fashion.
    Arun, I suggest you look at the pfsense forum.
    Email me if you have any questions.

  50. Arun
    Posted August 26, 2010 at 21:55 | Permalink

    Hi tom.
    Your website was dead for so many days man.ok any how i came back.
    But i followed your post step by step exactly and it worked.Even in your post you did not mention how to bond it..Whatever in your post i followed it.is there anything else you missed out.Please i want to solve that…its aa big burden for me for so long time.

  51. fgingat
    Posted October 30, 2010 at 19:19 | Permalink

    Many thanks to you.

    Now i can use my 2 poor adsl connections and join them to one “real” adsl connection.

    Regards

  52. Posted December 6, 2010 at 04:17 | Permalink

    Hi there,

    very nice article, it makes implementing load balancing easy. I was concerned about setup but it’s a piece of cake thanks to you!

    My customer, a hotel, currently has a Linksys RV042 router that is used for load balancing for the guest network, it’s worked fine for a few years but is now getting too congested, so I am implementing a Netgate router running pfsense. I am setting up the pfsense for captive portal and load balancing, and everything is working great so far in my test network.

    They have a lot of business clients and I’m concerned about the clients VPNs, which I think like to have only one connection and don’t like round robin type connections.

    Should I implement sticky connections or ? The end object of course is as few tech support calls as possible, and high reliabilty of the guest connections, no matter what protocols they use.

    Also both my public IP addresses are on the same subnet so I need to insert a router between opt1 and the ISP, which also works fine. Is that going to be an issue with VPN etc? I’m going to use a DIR 615 router that I have handy.

    Any other suggestions would be greatly appreciated.

    Thanks!

  53. Posted December 6, 2010 at 09:37 | Permalink

    Hey Bill,
    I wouldn’t do sticky connections unless you think you absolutely need it. I don’t go to hotels expecting everything to work, nor do I even take the time to complain when I can’t do something simple like SSH out.

    As far as the VPN, the VPN will only use WAN1 so no issue there, just put the second NAT device on WAN2.

    My other suggestion is to check out the pfsense forum. I have seen other people setting up a hotel deployment on the forums in the past and the topics might give you more ideas or answer any more questions you may have.

  54. Posted December 7, 2010 at 01:55 | Permalink

    Thanks for the info. I’m looking into the forums now. It’s always fun trying out new gear, and I hope it works as well as it should. Time will tell!

    Thanks again!

  55. Gologan-Dalimon Alex
    Posted May 3, 2011 at 15:28 | Permalink

    Hi Tom,

    Just dropping by to say thanks for the article. I had a “blast” trying to figure out why things weren’t working for me.
    I am having a network related project for school and high availability is on the priority list. So i was wondering if you have any suggestions on what to have in case the router doing the load balancing fails, like having a backup one to take the load. I was thinking something in the line of having another pfsense router and making a pfsync connection in between, but i am not 100% convinced that is the best avenue(only seeing CARP clusters using it).

    Anyway this working made my day. Thank you very much!

  56. thiha
    Posted May 11, 2011 at 20:53 | Permalink

    hi,brother Tom
    I have two internet connections of different ISP. they use dynamic ip addressing and different proxy, one for auto detect and one for ‘ygncache.mpt.net.mm’ setting and need authentication for internet access.
    I configure as above and use proxy setting by browser but still can’t access internet. I can login for internet access with this configuration. How can I configure pfsense with squid proxy and load balancing for those ISPs.

  57. Posted June 24, 2011 at 16:04 | Permalink

    Hello, Tom.

    I found Your pages on Google, and i really do appreciate Your web pages. Loads of very good information. Thank you for the effort.

    I am a network administrator, working on a networking project, involving a couple of pfsense firewall, running in a VMWare ESXI environment. I have to set up WAN failover on one of the pfsense firewalls. I have tried “everything”, including everything in your guide, and many other guides on the web, but with no luck. I have reached the limit of my capabilities, and do not know any further steps to take to get this working.

    I looks like you have a high level of knowledge about pfsense. Is it possible to enlist some help from You? If You could provide me Your email, we can perhaps communicate by mail or MSN. It would also be possible to set up a teamviewer session to my ESXi test environment.

    Please contact me by mail or MSN. Thank you in advance.

  58. Charlie
    Posted August 21, 2011 at 13:50 | Permalink

    Guys, Tom provided an article to help a certain situation out. I know he didn’t write it to cover all possible scenarios you guys are posting. Go to the forum as he hinted MANY times or pay him or pfSense for Support if you want more help. Begging for help is pathetic…

    Good job on the article Tom, it has helped me in my own setup. pfSense rocks!

  59. Gabriel
    Posted October 28, 2011 at 01:19 | Permalink

    Hi Tom, interesting and very useful site you have.
    I’m planning to install pfsense and use this feature of combine two wan’s (can I call it ‘broadband bonding’?) My question is, can I do this with dynamic IP’s? Since I have two DSL’s connected over PPPoE.
    Thanks in advance.

  60. Posted November 24, 2011 at 06:29 | Permalink

    With respect to a different gateway for load balance, I’ve read that a router can be used on one of the static IP (bridged IPs) and that would enable a different gateway although technically further up, they share a common gateway.

    Although I don’t get that if I set the router up say static, assign the wan & lan, what is the actual gateway address for that router?

  61. GetsugaTenzu
    Posted April 5, 2012 at 11:18 | Permalink

    I have question lets say that I setup a pfsense with Dual WAN.. I have two internet service provider on WAN1 and WAN2 what will happen if the ISP1 encounters poor service and drop connection… Will everyone connected on the network will use the WAN2 automatically as the internet service provider and PFSense will automatically re-route all traffic to WAN2->ISP2…

  62. Raoul
    Posted June 23, 2012 at 22:11 | Permalink

    Hello,
    I have a serious problem trying to add 2 more lines to the five I already have working in the loadbalancer. All are from the same provider, but as soon as I add one of them to the loadbalancing pool, after 10 seconds or so, all monitor IPs go offline.

    I have 2 PFSense firewalls with 2 netgear FS726T smartswitches (for hardware redundancy) and getting the same results on both of them.

    By themselves the new lines seem to work just fine. I’ve had dhcp turned off on both
    Can you help me out?
    Raoul

  63. Raoul
    Posted June 23, 2012 at 22:41 | Permalink

    Or at least point me to some helpful forum? I’ve searched for days now..

  64. Posted December 16, 2012 at 22:53 | Permalink

    Please let me know if you’re looking for a author for your weblog. You have some really good articles and I believe I would be a good asset. If you ever want to take some of the load off, I’d love to write some material
    for your blog in exchange for a link back to mine.
    Please send me an email if interested. Thank you!

  65. Posted March 18, 2013 at 13:29 | Permalink

    Do you mind if I quote a few of your articles as long as I provide credit and sources back to your website?
    My blog is in the exact same niche as yours and my visitors would truly benefit
    from some of the information you provide here. Please let me know if
    this alright with you. Thanks!

  66. Posted March 30, 2013 at 12:41 | Permalink

    Do not be in a hurry to take on the very first bid straight away.
    Where VPN is concerned, often the best VPN for Hulu, is onewhere you’ve paid for the service.
    In most cases, people would simply turn their systems
    off whenever they feel that the temperature is already suitable for what they need.

  67. Posted April 18, 2013 at 03:55 | Permalink

    Right here is the right site for anybody who wants to understand this topic.
    You know a whole lot its almost tough to argue with you (not
    that I really will need to…HaHa). You definitely put a new spin on
    a topic that’s been written about for a long time. Excellent stuff, just wonderful!

  68. Posted May 3, 2013 at 09:55 | Permalink

    Superb blog! Do you have any helpful hints for aspiring writers?
    I’m planning to start my own blog soon but I’m a little lost on everything.
    Would you recommend starting with a free platform like WordPress or go for a paid option?
    There are so many choices out there that I’m totally overwhelmed .. Any suggestions? Bless you!

Post a Comment

Your email is never published nor shared. Required fields are marked *

*
*

  • Welcome to TomSchaefer.org