Ask for WAN settings.

[yut.sin1301]

Hi there

Multi WAN - what am I missing here ?
« on: January 17, 2017, 05:54:53 pm »
Quote
Scratching my head here.

Setup Multi WAN with 2 x WAN connections as per the docs.

What I can't figure out is what to do with setting (or not) the default gateway on a WAN.

Clearly you can only set a default route on one connection or the other. But I presume (though it is not mentioned) that this should be disabled for both WAN connections in a Multi WAN setup.

OK, so no default gateway and we add a rule to forward all local traffic to the gateway group.

From Opnsense I can ping the gateway monitor IPs and they traceroute out via each WAN device correctly.

From Opnsense I can ping the DNS servers set by the WAN routers and they traceroute out via each WAN device correctly.

For the life of me what I cannot do is ping any other host. I just get "No route to host"

That kind of makes sense - there are routes set for the DNS IPs and for the gateway monitor IPs but no other traffic so the packets should be picked up by the firewall rule but nothing happens.

Nothing appears in the firewall logs.

You can see the routes set for the Googler DNS servers used as gateway monitor IPs and you can see the DNS servers set by the ADSL routers วิธีเล่นคาสิโนบนมือถือ

Internet:
Destination        Gateway            Flags      Netif Expire
8.8.4.4            192.168.2.1        UGHS     vtnet3
8.8.8.8            192.168.1.1        UGHS     vtnet1
10.0.0.0/24        link#1             U        vtnet0
10.0.0.251         link#1             UHS         lo0
127.0.0.1          link#8             UH          lo0
192.168.1.0/24     link#2             U        vtnet1
192.168.1.11       link#2             UHS         lo0
192.168.2.0/24     link#4             U        vtnet3
192.168.2.11       link#4             UHS         lo0
208.67.220.220     192.168.2.1        UGHS     vtnet3
208.67.222.222     192.168.1.1        UGHS     vtnet1

A traceroute to any of those 4 IPs shows the packets go the right way. But everything else is not getting picked up by the firewall/gateway group

So what on earth have I missed ? Do I still need to set a default gateway ?

Thank you for the advice.