'Re: [pfSense] Multiwan'

[prev in list] [next in list] [prev in thread] [next in thread] 

List: pfsense-discussion
Subject: Re: [pfSense] Multiwan
From: Adam Thompson <athompso () athompso ! net>
Date: 2012-08-08 22:41:16
Message-ID: 2ogmnuet3mhr743a500k07is.1344465676271 () email ! android ! com
[Download RAW message or body]

[Attachment #2 (multipart/alternative)]

[Attachment #4 (text/plain)]

One other way you can do it (but it's a kludge) is to have one router PER \
overlapping-subnet connection (probably doing 1:1 BAR), then have your main system \
behind those routers.  That way no single router has to see overlapping entries in \
its routing table. Obviously, this is only cost-effective with VMs, and only where \
you absolutely cannot get the ISP to change. (To put it another way - become an \
                intermediate ISP yourself that provides service to your main \
                firewall.)
-Adam

Ryan Rodrigue <Radiotech1@aaremail.com> wrote:

> Short answer is no.  So basically every interface on a router must be on a
> separate subnet.  It defines this by the network address and subnet mask.
> Having 2 internet accesses on the same network range but different
> interfaces will not work correctly.  Perhaps you could change one of them to
> a different network range?  If not maybe the ISP could do this for you.  A
> workaround I do not like, but has worked for some is to add another router
> in the mix to change one of the gateway IP's to a different subnet.
> 
> 
> 
> 		
> 
> Ryan Rodrigue
> 
> <http://www.aarelectronics.com/> Description:
> http://email.aaremail.net/AAR.png
> 
> P.O. Box 4336
> 
> 
> Chief Technical Manager
> 
> Houma, LA 70361
> 
> 
> A A R Electronics, Inc
> 
> Phone (985) 876-4096
> 
> 
> 510 West Tunnel Blvd
> 
> Phone (800) 649-7346
> 
> 
> Houma, LA 70360
> 
> Fax (985) 853-0134
> 
> 
> Systems@aaremail.com
> 
> www.aarelectronics.com <http://www.aarelectronics.com/> 
> 
> 
> 
> 
> 
> From: list-bounces@lists.pfsense.org [mailto:list-bounces@lists.pfsense.org]
> On Behalf Of Andrew @ ATMlogic.ca
> Sent: Wednesday, August 08, 2012 11:13 AM
> To: 'pfSense support and discussion'
> Subject: [pfSense] Multiwan
> 
> 
> 
> Just wondering a few things about multiwan.  In this case what I am
> wondering is can I take multiple Wifi bridges funnel them into pf, and have
> one Lan connection that (from what I understand) does some basic round robin
> load balancing.  I am aware this will give me some trouble on some websites.
> 
> 
> 
> However I am also worried. will everything work out if the WAN ports have
> the same gateway?  
> 
> 
> 
> e.g. I will be getting an internal IP of 192.168.0.20, 0.102, 0.87 and then
> 1.101 for example, however all the 0.'s will have the same 0.1 gateway yet
> be totally different connections to the web.  Not sure if that would matter.
> 
> 
> 
> 
> ---Andrew
> 
> ATM Logic
> 
> Never memorize something that you can Google
> 
> 
> 
> 
> _______________________________________________
> List mailing list
> List@lists.pfsense.org
> http://lists.pfsense.org/mailman/listinfo/list

[Attachment #5 (text/html)]

One other way you can do it (but it&apos;s a kludge) is to have one router PER \
overlapping-subnet connection (probably doing 1:1 BAR), then have your main system \
behind those routers. That way no single router has to see overlapping entries in \
its routing table. Obviously, this is only cost-effective with VMs, and only where \
you absolutely cannot get the ISP to change. (To put it another way - become an \
intermediate ISP yourself that provides service to your main \
firewall.) -Adam Ryan Rodrigue &lt;Radiotech1@aaremail.com&gt; \
wrote: <div class=WordSection1>Short answer is no.&nbsp; So basically every interface on a \
router must be on a separate subnet.&nbsp; It defines this by the network address and \
subnet mask.&nbsp; Having 2 internet accesses on the same network range but different \
interfaces will not work correctly.&nbsp; Perhaps you could change one of them to a \
different network range?&nbsp; If not maybe the ISP could do this for you.&nbsp; A \
workaround I do not like, but has worked for some is to add another router in the mix \
to change one of the gateway IP&#8217;s to a different \
subnet.<o:p></o:p><o:p>&nbsp;</o:p><div><table class=MsoNormalTable \
border=0 cellpadding=0><tr><td style='padding:.75pt .75pt .75pt .75pt'></td><td \
style='padding:.75pt .75pt .75pt .75pt'></td></tr><tr><td style='padding:.75pt .75pt \
.75pt .75pt'>Ryan \
Rodrigue<o:p></o:p></td><td rowspan=6 style='padding:.75pt .75pt .75pt \
.75pt'><a href="http://www.aarelectronics.com/"><img \
border=0 width=238 height=51 id="Picture_x0020_1" \
src="cid:image001.png@01CD7587.B8AEA360" alt="Description: \
http://email.aaremail.net/AAR.png"></a><o:p></o:p></td><td \
style='padding:.75pt .75pt .75pt .75pt'>P.O. Box \
4336<o:p></o:p></td></tr><tr><td style='padding:.75pt .75pt .75pt \
.75pt'>Chief \
Technical Manager<o:p></o:p></td><td style='padding:.75pt .75pt .75pt \
.75pt'>Houma, LA \
70361<o:p></o:p></td></tr><tr><td style='padding:.75pt .75pt .75pt \
.75pt'>A A R \
Electronics, Inc<o:p></o:p></td><td style='padding:.75pt .75pt .75pt \
.75pt'>Phone (985) \
876-4096<o:p></o:p></td></tr><tr><td style='padding:.75pt .75pt .75pt \
.75pt'>510 West \
Tunnel Blvd<o:p></o:p></td><td style='padding:.75pt .75pt .75pt .75pt'>Phone (800) \
649-7346<o:p></o:p></td></tr><tr><td style='padding:.75pt .75pt .75pt \
.75pt'>Houma, LA \
70360<o:p></o:p></td><td style='padding:.75pt .75pt .75pt .75pt'>Fax (985) \
853-0134<o:p></o:p></td></tr><tr><td style='padding:.75pt .75pt .75pt \
.75pt'><a \
href="mailto:Systems@aaremail.com">Systems@aaremail.com</a><o:p></o:p></td><td \
style='padding:.75pt .75pt .75pt .75pt'><a \
href="http://www.aarelectronics.com/">www.aarelectronics.com</a><o:p></o:p></td></tr></table><o:p>&nbsp;</o:p></div><o:p>&nbsp;</o:p><div \
style='border:none;border-left:solid blue 1.5pt;padding:0in 0in 0in 4.0pt'><div><div \
style='border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in'>From: \
list-bounces@lists.pfsense.org [mailto:list-bounces@lists.pfsense.org] On Behalf \
Of Andrew @ ATMlogic.ca Sent: Wednesday, August 08, 2012 11:13 \
AM To: 'pfSense support and discussion' Subject: [pfSense] \
Multiwan<o:p></o:p></div></div><o:p>&nbsp;</o:p>Just wondering a few things about multiwan.&nbsp; In this case what I \
am wondering is can I take multiple Wifi bridges funnel them into pf, and have one \
Lan connection that (from what I understand) does some basic round robin load \
balancing.&nbsp; I am aware this will give me some trouble on some \
websites.<o:p></o:p><o:p>&nbsp;</o:p>However I am also worried&#8230; will everything work out if the WAN \
ports have the same gateway?&nbsp; <o:p></o:p><o:p>&nbsp;</o:p>e.g. I will be getting an \
internal IP of 192.168.0.20, 0.102, 0.87 and then 1.101 for example, however all the \
0.'s will have the same 0.1 gateway yet be totally different connections to the \
web&#8230;&nbsp; Not sure if that would matter&#8230; <o:p></o:p><o:p>&nbsp;</o:p>---Andrew<o:p></o:p>ATM Logic<o:p></o:p>Never memorize something \
that you can Google<o:p></o:p><o:p>&nbsp;</o:p></div></div>

_______________________________________________
List mailing list
List@lists.pfsense.org
http://lists.pfsense.org/mailman/listinfo/list

[prev in list] [next in list] [prev in thread] [next in thread] 