Messages

Hi, another option would be to just run tcpdump showing vlan tag on the physical port.

tcpdump -i em2 -e vlan

Hope this helps

Trying to troubleshoot, as both gateways are up active default route is set correctly based on the priority of the
gateway. However as active gateway goes down,  GUI shows the second gateway as active but routing  table is not modified.
Anyone knows which process is taking care of updating  the routing table as an interface Status goes to down?

Hi all,
On a simple setup  with dual WAN & failover configuration it seems as we are missing a point.
Failover is working as expected for the LAN devices.
Opnsense  is resolving correctly through any of the DNS servers assigned to each gateway.
However, default gateway is not changing as first WAN goes down resulting in it not being able to reach a remote VPN Server.
Any tip would be appreciated.
Thanks

Hi there, one solution would be to use IGMP Proxy. One VLAN as upstream, second Vlan as downstream. Do not forget to select allow options on the firewall rule.
Rgds

Should you require to full expose some of your equipment on your LAN network (lest say X.X.X.10..20) fully to your WAN network, (Y.Y.Y.210-220), then you would assign these IP Alias to your WAN interface and add a 1:1 NAT rule Y.Y.Y.210 -->X.X.X.10 and so forth.
The above mentioned LAN devices would be fully reachable from your WAN Network.

Hope it helps to clarify the application.

Regards   

Quite useful as well for 1:1 NAT
Rgds

Could you try to install FreeBsd?

Hi there,
I don't think I get you idea correctly. If One to One Nat is what you need, you just need to create  Ip Alias address on the interface of Server1 facing the main network (10.158.0.21) and adding the One/One nat rule 10.158.0.21 to 
192.168.1.21.

Hope this helps.

Hi, On the firewall rule for the LAN interface, I guess you have selected the Gateway group, right?
Can you run a tcpdump/wireshark on any of the LAN devices and check if packets reach them?
Rgds 

if I get you right, your VPN client shows conneted.
You can see the route to your remote network, but you can not ping it.
can you ping the Remote Ip address of the VPN tunnel interface

rgds

Hi there,
What sort of 10G NIC's on Proxmox 1?
Can you just try to run Iperf3 from the the Opnsense VM?
Rgds

Great Info.
Do you have the means of running some sort of stress/troughput  test on the device?
Rgds

What about firewall rules on the WAN interfaces?

Ein paar fragen.
Verliert der ONT den Optisches link (oder Sync)?
Wie sind der DNS Servern an der Opnsense konfiguriert (direct oder von der PPPoe client)?
Grüsse

Hi there,

are you WAN interfaces directly connected to internet or are they on a private network?

Rgds