Hi all,
So I’m trying to wrap my head around something with PFSENSE.
To give some context, at home I have 2 separate ISP’s with completely different static wan subnets, served using 2 different PFSENSE boxes. Both those boxes have several LAN vlans for different purposes, but the key to this discussion is that they both have a HomeLAN vlan. What I want to do is be able to have failover internet for that vlan/interface so that if one ISP fails or the PFSENSE box fails, the traffic will switch to the other. I completely understand that all sessions will of course reset, this isn’t meant to be a totally seamless switch, this is the I’m out of the city for a few days and I want to make sure the house doesn’t loose internet while I’m gone, and I don’t want to have to walk my wife through a physical switch over if at all possible
Previously when I had cisco boxes I used HSRP on that subnet, and trackers to monitor if each box had connectivity to the internet, if one failed the HSRP would flip over, and obviously my workstations used the HSRP address as the gateway.
So where I’m hung up is do I need HA for this?
If so does the sync virtual ip’s only sync the CARP ips ? Each box has a bunch of localhost ip’s for their corresponding internet subnets. and how would the LAN CARP IP know when to switch ?
or is it a gateway group ? but if it is how would you set it up across 2 boxes ?
I’m sure there has to be a way to do this, but I haven’t found that nugget of documentation yet that deals with this sort of configuration. Multi wan on one PFSENSE box, sure. 2 PFSENSE boxes with failover for HA (like redundant firewalls) sure. but not 2 with 2 different ISP’s and just trying to provide failover connectivity for surfing etc.
Thanks in advance for any suggestions you may have