5

I am running a pfSense 2.3 box with 4 NICs. Now i have 2 different ISPs (one Cable & one DSL). How Can i configure, that all traffic from LAN1 goes ONLY over WAN1, and all traffic from LAN2 goes ONLY over WAN2? I Dont want any Failover or LoadBalancing, just seperate each Networks "Gateways". Here a simple diagram, on what i try to achieve. enter image description here

  • Did any answer help you? If so, you should accept the answer so that the question doesn't keep popping up forever, looking for an answer. Alternatively, you could provide and accept your own answer. – Ron Maupin Aug 14 '17 at 2:14
  • Unfortunately not :( – andy Aug 14 '17 at 15:26
3

Instead of ISP IP addresses as gateways, you could use two tier-based gateway teams.
Each gateway team will have the preferred ISP in tier 1, while the other ISP will be in tier 2.

  • TEAM-ISP1
    • ISP1 tier 1
    • ISP2 tier 2
  • TEAM-ISP2
    • ISP2 tier 1
    • ISP1 tier 2

In normal conditions, each LAN will use the tier 1 member of the team.
When ISP1 goes down, ISP2 will be used by both LAN1 and LAN2.
When ISP2 goes down, ISP1 will be used by both LAN1 and LAN2.

| improve this answer | |
  • That sounds interesting and is perhaps a good alternative for me, how do i do that exactly? – andy Sep 18 '17 at 10:49
  • 1
    Go to System > Routing > Gateway Groups > Add, use a menaningful name as "TEAM-ISP1" to the group, and define gateway tiers in the Gateway Priority area. You'll find your ISP1 and ISP gateways already there, just set tiers changing from "Never" to "Tier 1" for ISP1 an "Tier 2" for ISP2 in the dropdowns. Save and repeat the same procedure, adding a new gateway group, this time called "TEAM-ISP2", where ISP1 will have "Tier 2" and ISP2 "Tier 1". From this moment on, you can select gateway groups in firewall rules. – Marco De Lellis Sep 18 '17 at 12:32
  • Perfect that worked and is exactly what i wanted and very simple. Thank you very much! – andy Sep 19 '17 at 8:26
0

You can do that by changing the NAT rules. (This only works for IPv4)

Firewall --> NAT --> Outbound --> "Mode": Manual Outbound NAT rule generation (AON - Advanced Outbound NAT).

Now you can specify which subnet goes over which WAN interface:

Interface --> Choose WAN interface

Source --> Specify LAN subnet

PfSense NAT

enter image description here

| improve this answer | |
  • Thank you for the clear answer. Now i have done that, as you guided. I have switched to Manual Outbound NAT Rule Generation (AON) and deleted all automatic added mappings. Then i set up 2 mappings, for each of my LANs, as you described in your answer. But my LAN2 isnt able to go online. Edit: Can it be, that it is necessary to select the Gateway to use, in Firewall -> Rules -> LAN and Firewall -> Rules -> LAN2 in each of the Default Rules? – andy May 1 '16 at 14:35
  • Yes, I believe that using the gateway selection in the firewall rules page is the best way to route LAN1 to WAN1 and LAN2 to WAN2. Try it! – Ted Quanstrom May 1 '16 at 16:33
  • Now i Setup like Quincy said and in Addition set the the Gateways in the Firewall rules page (in LAN1 i set WAN1 as Gateway and in LAN2 i set WAN2 as Gateway). This works, but if WAN1 goes down (unplug cable), then LAN1 is offline, which is correct, but LAN2 seems it cant resolve dns anymore, so no real Internet Connection. What could this be? – andy May 1 '16 at 17:26
  • Has someone other any idea? – andy May 2 '16 at 8:46
  • I Think you should edit the interface in your advanced setting screen. I added a screenshot to my previous post. (You can find it at System --> General Setup) – Quincy May 2 '16 at 17:40

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.