[pfSense] Double WAN with same GW

2012-07-09 Thread b...@todoo.biz
Hello,


I have seen couple of threads about dual WAN bound to the same GW.

I wanted to know if there was a proper way of dealing with this ?
And what you suggested ?


The idea is to set up a Gateway Group and be able to define various
load balancing policies… (Policy based routing) + (2 Tier 1 links)


Any info about the specific manipulation we might have to do in this
case are very welcome ! Even if It is to let me know that this is
impossible to do !


Sincerely yours.

G.B.

––
- Grégory Bernard Director -
--- www.osnet.eu ---
-- Your provider of OpenSource appliances --
––
OSnetOSnetOSnetOSnetOSnetOSnetOSnetOSnetOSnetO
___
List mailing list
List@lists.pfsense.org
http://lists.pfsense.org/mailman/listinfo/list


Re: [pfSense] Double WAN with same GW

2012-07-09 Thread Michael Schuh
2012/7/9 b...@todoo.biz b...@todoo.biz

 Hello,


 I have seen couple of threads about dual WAN bound to the same GW.

 I wanted to know if there was a proper way of dealing with this ?
 And what you suggested ?


 The idea is to set up a Gateway Group and be able to define various
 load balancing policies… (Policy based routing) + (2 Tier 1 links)


 Any info about the specific manipulation we might have to do in this
 case are very welcome ! Even if It is to let me know that this is
 impossible to do !


 Sincerely yours.

 G.B.

 ––
 - Grégory Bernard Director -
 --- www.osnet.eu ---
 -- Your provider of OpenSource appliances --
 ––
 OSnetOSnetOSnetOSnetOSnetOSnetOSnetOSnetOSnetO
 ___
 List mailing list
 List@lists.pfsense.org
 http://lists.pfsense.org/mailman/listinfo/list


Hi,

what about to look into the HOWTO Section of the pfSense Docs, using google
or browse in the posts from this mailing list or the forum of pfSense?

if i got you right, that http://doc.pfsense.org/index.php/LAGG_Interfaces
 and http://doc.pfsense.org/index.php/Multi_WAN_/_Load_Balancing
http://doc.pfsense.org/index.php/Multi-WAN_2.0
http://doc.pfsense.org/index.php/LAGG_Interfacescould be helpful and IMHO
a good solution.

With plain TCP/IP you will have (not - depends on the viewpoint) much fun
if you have 2 WAN-NIC's.

The Proper way also depends on what you need to get/reach.
Means: Failover, Loadbalancing, policy based routing...
The mentioned articles should leave not much questions open.

HTH

greetings

m.

-- 
= = =  http://michael-schuh.net/  = = =
Projektmanagement - IT-Consulting - Professional Services IT
Michael Schuh
Postfach 10 21 52
66021 Saarbrücken
phone: 0681/8319664
mobil:  0175/5616453
@: m i c h a e l . s c h u h @ g m a i l . c o m

= = =  Ust-ID:  DE251072318  = = =
___
List mailing list
List@lists.pfsense.org
http://lists.pfsense.org/mailman/listinfo/list


Re: [pfSense] Double WAN with same GW

2012-07-09 Thread Vassilis V.
Hi!

The only difference to having different GW for each WAN is that with the
same GW you need to specify a differnet monitor IP for one of the WAN
interfaces. The rest of the configuration stays the same.

Choose your monitor IP carefully though, if that IP ever stops
responding or has a bad connection, your pfsense will assume that your
WAN interface is down.

Vassilis


b...@todoo.biz wrote on 09.07.2012 13:25:
 Hello,
 
 
 I have seen couple of threads about dual WAN bound to the same GW.
 
 I wanted to know if there was a proper way of dealing with this ?
 And what you suggested ?
 
 
 The idea is to set up a Gateway Group and be able to define various
 load balancing policies… (Policy based routing) + (2 Tier 1 links)
 
 
 Any info about the specific manipulation we might have to do in this
 case are very welcome ! Even if It is to let me know that this is
 impossible to do !
 
 
 Sincerely yours.
 
 G.B.
 
 ––
 - Grégory Bernard Director -
 --- www.osnet.eu ---
 -- Your provider of OpenSource appliances --
 ––
 OSnetOSnetOSnetOSnetOSnetOSnetOSnetOSnetOSnetO
 ___
 List mailing list
 List@lists.pfsense.org
 http://lists.pfsense.org/mailman/listinfo/list
 

___
List mailing list
List@lists.pfsense.org
http://lists.pfsense.org/mailman/listinfo/list


Re: [pfSense] Network freezes on IBM x3550, Broadcom NICs

2012-07-09 Thread Paul Gear
On 09/07/12 06:01, Chris Buechler wrote:
 ...
 Can anyone comment on the quality of the Broadcom driver in post-8.1
 releases?  Is there any way to run a more recent kernel in conjunction
 with pfSense?

 
 Short of running 2.1, not easily. I do have some customer systems
 running 2.1 in production for several months because 8.1 didn't
 support some component (RAID card IIRC) that 8.3 does.

I'm happy to consider running 2.1 in production.  Is reason to believe
that the Broadcom drivers are considerably improved in the 8.3 kernel?

Paul

___
List mailing list
List@lists.pfsense.org
http://lists.pfsense.org/mailman/listinfo/list


[pfSense] Multi-WAN for multiple LANs

2012-07-09 Thread Jerome Alet
Hi,

We'd like to setup 2.1 with two different WAN interfaces, each being
exclusively used by two sets of several LAN's.

So what we've done is create first WAN (WAN1) and set its gateway (GW1)
as the default one.

And now we've added second WAN (WAN2) and its gateway (GW2)

So we've got NETS1 as LAN1+LAN2+DMZ and NETS2 as LAN4+LAN5

Since GW1 is the default gateway, without doing anything all traffic
will go through it.

We'd like to have NETS1 to never go through GW2, but NETS2 to never go
through GW1, and always go through GW2.

NETS2 should use the pfSense box as its DNS server, which in turn uses DNS
servers located in NETS1, and NETS2 should be able to access to some
machines in DMZ without going through GW2, but directly through pfSense.

On top of that we want to use manual NAT outbound rules and use NATNETS2
IP Address (which is a CARP type interface address) as the NAT address
when NATting clients from NETS2. This address is also defined as the
tcp_outgoing_address for clients from NETS2 in pfSense's Squid
configuration.

Is there an HOWTO about doing this sort of things, or could anyone give
us some hints ?

What we've found so far are only documents about multi-wan with load
balancing or failover, and while we want failover on all our LANs, we
specifically don't want this on our WANS : because of legal reasons
clients from NETS2 are now allowed to use GW1.

Thanks in advance for any help on this matter

--
Jérôme Alet - jerome.a...@univ-nc.nc - Direction du Système d'Information
  Université de la Nouvelle-Calédonie - BPR4 - 98851 NOUMEA CEDEX
   Tél : +687 290081  Fax : +687 254829
___
List mailing list
List@lists.pfsense.org
http://lists.pfsense.org/mailman/listinfo/list