Hi - thanks very much for this.  I've had another crack, and updated to the 
latest firmware snapshot (suggested by Scott), and it's looking a lot better 
now!

Cheers
Alastair

-----Original Message-----
From: Royce Mitchell III [mailto:[EMAIL PROTECTED]
Sent: Fri 07/07/2006 15:56
To: [email protected]
Subject: Re: [pfSense Support] Dual WAN - major problems
 
I have a load balanced, dual wan, carp setup with an ipsec tunnel 
running off of wan2. Here is what I've had to do to get it to work. If 
there's enough interest I'll filter my config file and share it.

First of all, you must setup two advanced outbound nat rules:
1st nat rule:
    if: WAN
    source: 192.168.0.0/24 ( lan subnet )
    source port: *
    dest: *
    dest port: *
    nat addr: wan carp ip
    nat port: *
    static port: no

2nd nat rule:
    if: WAN2 ( OPT1 or whatever you relabel it to, I recommend you 
rename it to wan2 or something )
    source: 192.168.0.0/24 ( lan subnet again - same as first rule )
    source port: *
    dest: *
    dest port: *
    nat addr: wan2 carp ip
    nat port: *
    static port: no

<snip>

<<winmail.dat>>

---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to