OPNsense Forum

English Forums => General Discussion => Topic started by: MarvinParanoidAndroid on December 28, 2018, 10:29:05 am

Title: Setup help: Multi-WAN failover
Post by: MarvinParanoidAndroid on December 28, 2018, 10:29:05 am
Hi everyone!

I've been using OPNsense now for.... almost a day, and so far I am very impressed!

To put all the cards on the table starting out; I'm not an IT-professional and have not really spent a lot of time setting up networks and stuff. I have gotten the initial setup done, but setting up WAN-failover to my 4G-USB-dongle seems like a tall order right now.

I have previously successfully used this with an ASUS home router, so I know the basics, but after reading the Multi-WAN wiki I'm not really that keen on trying this myself (it seems like there are many ways to get this wrong)...

What complicates this slightly is that I run a few web servers behind this router, so downtime in excess of a few minutes is not... Desirable...

I have connected the 4G dongle and it seems to be working fine.


What I would like to do is this:
- Set up failover from WAN to 4G if WAN-connection is lost.
- Switch back to WAN from 4G when WAN-connection is reestablished.
- Not use any kind of load balancing; 4G is metered while WAN is unlimited and much faster
- Set up some kind of DNS-service(?) which routes traffic to either WAN or 4G based on which connection is up (I have a website that points to my current IP. During a failover scenario my external IP would change to the 4G-IP-address (dynamic), and my website(s) should route the traffic accordingly.


The current setup looks like this:

Interfaces:
LAN
WAN
4G

Gateways:
- Single (WAN_DHCP)
- Group (NONE)

Firewall:
- LAN (IPv4 - Source: LAN net - "Default allow LAN to any rule)
- WAN (Port-forwarding rules associated with the web-servers)
- NAT: Outbound ("Automatic outbound NAT rule generation)
- Settings: Advanced (Reflection for port forwards ON, Automatic outbound NAT for reflection ON)

Services:
- DHCPv4 server on (192.168.1.0 / 255.255.255.0)
- Static mapping for 4 servers and my "home-router" (Ubiquity HD, providing networking for the family).
- Unbound DNS (DNSSEC ON, DHCP registration ON, DHCP Static Mappings ON)


Could someone please provide me with a step by step solution, keeping in mind that I'm not that knowledgeable in regards to networking? Again; I did take a look at the Multi-WAN wiki, but I'm not feeling too comfortable trying it out without some guidance.

Any help would be highly appreciated :)

Title: Re: Setup help: Multi-WAN failover
Post by: MarvinParanoidAndroid on December 28, 2018, 09:27:58 pm
Ok. I have started working on this.

I have completed steps 1,2,3 and 5 (not 4!) in the Multiple-WAN wiki...

As I mention I run a webserver (using port 443 on a local machine), and when I do step 4 (amend IPv4 "Default allow LAN to any rule" to use the new gateway access to the webserver from the outside is suspended (immediately).

I.e trying to navigate to the page just times out. The second I revert to "default" gateway the problem is alleviated.

Any ideas? :)
Title: Re: Setup help: Multi-WAN failover
Post by: xames on January 01, 2019, 07:55:15 pm
I have the same issue. MultiGateway not working default yes.