Gateway Group Not Working as Expected
I recently added a second ISP to my OPNsense router. I added a new WAN interface and added it as a gateway. I set up monitoring on each gateway interface as well. I set my primary WAN1 (preferred ISP as 254 priority) and my secondary WAN2 (metered ISP as 255 priority). I setup a gateway group called 'WAN FAILOVER' and set the Tier 1 and Tier 2 as WAN1 and WAN2.
All this appears to allow the system to fail over to WAN2 during a WAN1 outage. It also restores back to WAN1 once it becomes available again.
However, when I change my gateway on each networks inbound firewall rule to 'WAN FAILOVER' from 'default'. I loose access to everything - even LAN resources. Not sure what the group even does here if the default does the failing over anyway....
My end goal is to have some networks fail over and some that do not, so I was assuming I could have 2 gateway groups. 1 called 'WAN FAILOVER' and 1 called 'WAN1 ONLY' and assign those as needed.
I have 3 networks (wireless, wired, IoT) the goal is to allow the wireless and wired networks to fail over to WAN2 when WAN1 fails, but the IoT network does not fail over and looses internet during a WAN1 outage.
What am I missing with the gateway groups and the firewall rules? I feel like I am close, but missing something.