Ok so I have 2 WANs coming in to a balance 20:
WAN 1 - Cable 150/50 - /29 static
WAN 2 - Fiber 200/200 - 1 IP only DHCP
I have a rack with 2 Pfsense appliances in High Availability
Each Firewall is connected to two switches for distribution, LAN 1 and LAN 2.
Each server in the rack has dual nics, connected to LAN 1 and LAN 2, configured for failover.
I am tasked with providing redundancy as much as possible. So far everything from the Pfsense appliances down is working. Can kill power or drop an ethernet cable on either firewall or either switch without dropping packets to the WAN side of the firewalls.
I need help with the Peplink side. So far I am testing at another location (away from the peplink).
The High Availability on the firewalls requires minimum of 3 static IPs from each WAN in order to have clean failover. The challenge is that we cannot get statics from the Fiber ISP. Otherwise I would be inclined to eliminate the peplink.
Options / Questions:
Should I get a second Balance 20? what advantages would that give us beyond hardware redundancy of that stage?
Should I eliminate the Balance 20?
Can the Balance 20 forward 3 static IPs from WAN1 to 2 of its LAN ports?
Can the Balance 20 NAT the DHCP IP from WAN2 to 3 statics, and assign those to 2 of its LAN ports?
I need to setup a few highly available VPN tunnels into the network. If I set these up on the Pfsense firewalls, how easily will these pass through a multi-WAN implementation on the Balance 20?