From: Tebano epaminonda [mailto:l_epa_m_ino...@hotmail.com] 
Sent: June 10, 2009 12:20 PM
To: support@pfsense.com
Subject: RE: [pfSense Support] Multiwan suggestions before v. 2.0 ...

________________________________

Date: Wed, 10 Jun 2009 12:11:21 -0400
From: evgeny.yurche...@frontline.ca
To: support@pfsense.com
Subject: RE: [pfSense Support] Multiwan suggestions before v. 2.0 ...

________________________________

From: Tebano epaminonda [mailto:l_epa_m_ino...@hotmail.com] 
Sent: June 10, 2009 10:04 AM
To: support@pfsense.com
Subject: RE: [pfSense Support] Multiwan suggestions before v. 2.0 ...

 



> Date: Mon, 1 Jun 2009 23:13:00 -0400
> From: c...@pfsense.org
> To: support@pfsense.com
> Subject: Re: [pfSense Support] Multiwan suggestions before v. 2.0 ...
> 
> On Mon, Jun 1, 2009 at 3:59 AM, Tebano epaminonda
> <l_epa_m_ino...@hotmail.com> wrote:
> > Sorry, Guys.
> > I where discussing of limitation reported into the features of:
> >
> > Inbound Load Balancing
> >
> 
> What exactly are you referring to?
> 
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: support-unsubscr...@pfsense.com
> For additional commands, e-mail: support-h...@pfsense.com
> 
> Commercial support available - https://portal.pfsense.org
> 

Well, to be honest, basically I'm not sure, so I suppose my problem
comes from this feature.
Here it's.

I've 2 isp with 2 different IP and routers.
So I've configured 2 pfsense in load balance and with carp between them
(internal and external, so I always has a single IP to manage with
routes and nats).
All works perfectly, if all ISP are working, or if I detach the WAN2-isp
connection.

But if I try to detach the first one, no-one is able to connect to the
external of pfsense;
the same pfsenses aren't able to connect to the internet.

I see (correctly!), into the "load balance" status that only half of
monitored IP are reachble, but if I try to traceroute them, or something
else, connection fails.

Like there was a rule that "link" only to default wan the outgoing
packets, so if it fails, no-one is able to go, on neither of 2 pfsense!

Has anyone experienced my same trouble?
Thanks to all.
Cheers.
Tebano.

________________________________

See all the ways you can stay connected to friends and family
<http://www.microsoft.com/windows/windowslive/default.aspx> 

 

Loadbalancing and carp are two completely different things. I would
suggest to shutdown your secondary (in carp) firewall and troubleshoot
your loadbalancing at your primary pfSense.

 

Eugene

 

---

 

Hi Eugene.

Thanks for Your answer.

Yes, I've just tried this way before write here.

I've shut down the secondary system and tried to detach the primary wan
with only one pfsense up.

Same problem: no connection to the external network...

Thanks anyway.

Cheers.

Tebano.

 

________________________________

Windows Live(tm): Keep your life in sync. Check it out!
<http://windowslive.com/explore?ocid=TXT_TAGLM_WL_t1_allup_explore_01200
9> 

Hi Tebano,

If you disconnect primary ISP and your pfSense sees secondary ISP green
then probably:

1)       your secondary ISP does not provide internet,

2)       you misconfigured your rules for LAN.

You have this loadbalancer in "gateway" in rules for LAN, right?

 

Reply via email to