Configure pfSense for Dual-WAN Load Balancing and Failover

Learn how to configure pfSense for dual-WAN load balancing and failover with clear steps, real commands, and proven settings for stable internet. Our 24/7 Live Support Team is always here to help you.

Internet downtime is no longer a small inconvenience. It breaks work, slows businesses, and tests patience. That’s exactly why learning how to Configure pfSense for dual-WAN load balancing and failover is worth your time. With the right setup, pfSense can spread traffic across two ISPs and switch instantly when one line drops.

Let’s walk through this the right way with settings that actually work.

Why Dual-WAN on pfSense Makes Sense

First, you get redundancy. If ISP #1 goes down, your network stays alive.
Second, you get better bandwidth usage. Traffic is shared intelligently.
Most importantly, pfSense does this without expensive hardware.

When you Configure pfSense for dual-WAN load balancing and failover, you’re building a network that doesn’t panic when one cable fails.

What You Need Before Starting

Before moving forward, make sure you have:

• Two internet connections (ADSL, FTTH, LTE, Cable—any mix works)
• A pfSense box with at least 3 NICs
• Two ISP modems
• Static or DHCP IPs from both ISPs
• Monitor IPs
• ISP 1: 8.8.8.8
• ISP 2: 208.69.38.205

Once this is ready, you’re good to go.

Steps

Configure LAN Interface

Open the pfSense web UI:

http://172.16.1.254

Go to Interfaces → LAN and set:

• IP Address: 172.16.1.254/24
• Enable interface
• Save and apply

This becomes the default gateway for all clients.

Configure WAN 1 (ISP #1)

Navigate to Interfaces → WAN01.

• Set IPv4 type: Static or DHCP (as per ISP)
• Enter gateway IP
• Enable interface

Now confirm connectivity:

Diagnostics → Ping

Ping Host: ISP1 Gateway IP

You must get replies before moving on.

Configure WAN 2 (ISP #2)

Repeat the same process under Interfaces → WAN02.

Then test again:

Ping Host: ISP2 Gateway IP

Both WANs should respond.

Verify Gateway Status

Go to Status → Gateways.
Both gateways must show green. If not, fix this first.

Set Monitor IPs

Navigate to System → Routing → Gateways.

Edit gateways:

• WAN1 Monitor IP: 8.8.8.8
• WAN2 Monitor IP: 208.69.38.205

Apply changes.

This step decides how pfSense detects failure, so don’t skip it.

Create Load Balancer Group

Now comes the core part where you Configure pfSense for dual-WAN load balancing and failover properly.

Go to System → Routing → Gateway Groups → Add.

Settings:

• Group Name: WanLoadBalancer
• WAN1: Tier 1
• WAN2: Tier 1
• Trigger Level: Member Down
• Save and Apply

Same tier means real load balancing.

Create Failover Groups

Create two more gateway groups.

Failover for ISP 1

• WAN1: Tier 1
• WAN2: Tier 2

Failover for ISP 2

• WAN2: Tier 1
• WAN1: Tier 2

This ensures priority-based switching.

Firewall Rules (Critical)

Go to Firewall → Rules → LAN → Add.

Click Display Advanced and set:

• Gateway: WanLoadBalancer

Save and apply.

Repeat rules for failover groups if you want selective routing.

Without this step, your setup won’t work.

Client Network Settings

Client machines should use:

• IP Range: 172.16.1.1 – 172.16.1.253
• Gateway: 172.16.1.254
• DNS: 172.16.1.254 or 8.8.8.8

Test from a client:

ifconfig

netstat -nr -f inet

ping -c 2 google.com

Speed test:

python speedtest-cli

You’ll notice better throughput and instant failover.

Conclusion

When done right, Configure pfSense for dual-WAN load balancing and failover gives you stability, speed, and peace of mind. No vendor lock-in. No fragile scripts. Just solid networking that keeps working.