Messages

Hi I am using OPNSense and I want to achieve multi Wan Load Balance and fail-over but it is not working. My Network Layout is given below.

WAN – DHCP – 192.168.0.x (Monitor IP – 8.8.8.8)

WAN2 - DHCP – 192.168.29.x (Monitor IP – 1.1.1.1)

LAN – 192.168.1.0/24 (Not in Use)

XG1 – 172.16.0.1 – Connected to a Mikrotik Router having IP 172.16.0.2. The Mikrotik Router have 3 Networks 172.16.10/25, 172.16.20/24 and 172.16.3.1/25 and 172.16.4.1/23. All traffic coming from Mikrotik is routed towards OPNSense.

Now with this setup it works with single gateway. However, gateway failover and load balance does not work. My Actual LAN Network is 172.16.10/25, 172.16.20/24 and 172.16.3.1/25 and 172.16.4.1/23

Also my WAN Gateway is always shown as down and only WAN2 gateway is shown as up even though WAN is actually UP. When I ping

Please help me to achieve gateway load balance and failover with this setup.

Please see the attached pdf file for screenshots of OPNSense configuration


Please let me know if any more information needs to be shared


Thanks in advance

Neelim

Hi,

I am new to OPNSense(coming from sophos environment) and need your suggestions in achieving a specific setup. I have a router(172.16.0.2) connected to the OPT interface of my OPNSense Firewall(172.16.0.1) which transparently passes the traffic to the OPNSense box which in turn does the NAT(through manual NAT rules that I have added) and provides internet access to the clients connected through the router. Basically the router is doing hotspot and vlans etc(172.16.1.0/25, 172.16.2.0/24,172.16.3.0/25,172.16.4.0/24). and it is working fine.

my LAN interface is not having any actual users. It is only used for management.

This setup works when i use only one WAN, but as soon as I and a second interface WAN2 and create gateway fail-over group to achieve multi wan it stops working.

Now I want to know how it can be fixed? Should I change my LAN interface to OPT? or there is some way where I can keep both wan and based on the source network (172.16.1.0/25, 172.16.2.0/23 etc.) or IP address I can use WAN or WAN2 for the traffic?

Thanks in advance