OPNsense Forum

English Forums => High availability => Topic started by: ualex on November 29, 2023, 08:38:36 AM

Title: Multi-WAN failover not working?
Post by: ualex on November 29, 2023, 08:38:36 AM
I have now 2 uplinks (1 fiber ISP and 1 coax ISP) and I am trying to configure the multi-WAN setup (https://docs.opnsense.org/manual/how-tos/multiwan.html and https://www.thomas-krenn.com/de/wiki/OPNsense_Multi_WAN), but it is not working.

My internet is connected as follows:
WAN - re0 (fiber ISP)
WAN2 - ue0 (coax ISP)

By default all traffic goes via the WAN and if I disable the gateway, it fails over successfully to WAN2.

Only when I try to simulate a failover, in the GUI all looks good and routing on OPNsense looks good too ... BUT the LAN connectivity never starts working via WAN2.

I used the following steps:
1) Ping from LAN e.g. IP 1.1.1.1 or 9.9.9.9 - WORKs
2) ifconfig re0 down
3) (wait 1 minute)
4) In the GUI WAN is down and WAN2 is active
5) OPNsense CLI shows default GW is now WAN2
6) Repeat step 1, but it FAILs
7) Checked the firewall log and I can see the ping is going out via WAN2 (ue0), but no response is received?

My configuration is in the images below, I think all looks according to the how-tos?
Title: Re: Multi-WAN failover not working?
Post by: Maurice on December 02, 2023, 02:16:15 AM
Is outbound NAT configured correctly for WAN2?

Cheers
Maurice
Title: Re: Multi-WAN failover not working?
Post by: ualex on December 02, 2023, 10:14:59 AM
Quote from: Maurice on December 02, 2023, 02:16:15 AM
Is outbound NAT configured correctly for WAN2?

Cheers
Maurice

That was it!

Under Firewall -> NAT -> Outbound, I left it on "Automatic outbound NAT rule generation", which does not generate the WAN2 rules in my instance. When I was testing with a vanilla OPNsense, it does auto generate the WAN2 rules. Thanks, something new learned today too.