Open a browser software, enter the IP address of your Pfsense firewall and access web interface.
In our example, the following URL was entered in the Browser:
• https://192.168.15.30
The Pfsense web interface should be presented.
On the prompt screen, enter the Pfsense Default Password login information.
• Username: admin
• Password: pfsense
After a successful login, you will be sent to the Pfsense Dashboard.
Access the Pfsense System menu and select the Advanced option.
On the Miscellaneous tab, perform the following configuration:
Locate the load balancing area and enable the sticky connections feature.
Locate the Gateway monitoring area and perform the following configuration:
• State Killing on Gateway Failure - Yes
• Skip rules when gateway is down - Yes
Click on the Save button and then on the Apply button.
Keep in mind that you need to reply this configuration to all LAN firewall rules.
In our example, we have 1 LAN interface and 2 WAN interfaces.
Both WAN interfaces are using DHCP IP address.
Access the Pfsense System menu and select the Routing option.
In our example, the Pfsense firewall has 2 WAN Gateways.
Access the Gateway groups tab and click on the Add button.
On the Gateway group screen, perform the following configurations:
• Group Name - Enter an identification to the WAN group
• Gateway Priority WAN1 - Tier 1
• Gateway Priority WAN2 - Tier 1
• Trigger Level - Packet Loss or High Latency
• Description - Optionally enter a description
Click on the Save button to finish the Gateway group configuration.
When you select the same TIER level to both links the load-balancing feature will be enabled.
Access the Gateways tab, locate the Default gateway area and perform the following configuration:
• Default gateway IPv4 - Select the Gateway group name created before
Click on the Save button and then on the Apply button.
If a WAN gateway packet Loss thresholds reach 20%, the link will be considered down.
If a WAN gateway Latency thresholds reach 500ms, the link will be considered down.
Congratulations! You have finished the pfsense WAN failover configuration.
Access the Pfsense Firewall menu and select the Rules option.
Access the LAN tab and edit the default IPV4 LAN rule.
On the firewall rule properties, locate the Extra options area and click on the Display advanced button.
On the Advanced Options area, locate the Gateway configuration option and select your gateway group name.
Click on the Save button to apply the changes on the Pfsense configuration.
Optionally, access the Dashboard and add a new widget to monitor the Pfsense gateways.
The new widget will monitor the Pfsense gateway status.
You are now able to monitor the status of all Pfsense gateways.
