PFSense supports multiple WAN connections using a Wi-Fi backbone.
PFSense supports multiple WAN connections using a Wi-Fi backbone.
Hi everyone, I'm getting ready to configure two PFSense servers for two locations. Each site already has its own internet connection and is currently linked through a VPN. My goal is to route the VPN connection over the WAN, while also using the Wi-Fi as a backup or alternative for communication between the sites. I set up the Wi-Fi as a static network and created a gateway to manage this, but I wasn't sure how the networks on either side would interpret it. Essentially, I'm wondering how to establish a Wi-Fi link between the sites so you can either direct LAN traffic or route it through the WAN VPN connection, or set up a failover if either site loses internet. Thanks in advance, and I'm still getting the hang of PFSense. Best regards, David
When linking two locations, a VPN is often useful, especially when data travels over the internet. I’m new to configuring this on Pfsense, but Cisco employs a technology called IPsec.
Hi, glad you could get the VPN part set up with IPSec. The challenge is with the Wi-Fi connection between the two sites—you need a failover plan so access stays available even if the VPN or internet goes down. This way, both locations can still reach the servers and possibly use the internet at each other’s ends. Let me know if that makes sense!
You're asking about the specifics of a Wi-Fi link setup, likely involving PTP antennas and OSPF routing. Essentially, you want to run the network through each site via a tunnel, and if one site goes down, traffic will switch to wireless once it reconnects. The OSPF routing protocol will handle the path selection, while you may need to increase costs for PTP support.
You're asking about a Wi-Fi setup where two APs connect to each other. Do you mean the configuration you described? Yes, the AP at site 1 connects to PFSense at site 1, then both connect to the internet, and from there to APs at site 2. Are AP 1 and AP 2 in the same network? Probably not, since they're likely behind different subnets.