Automatic Ethernet and WiFi failover on FreeBSD

28 Feb 2020 - tsp
Last update 07 Mar 2020
Reading time 3 mins

If one uses a mobile computer like a notebook one might often be in the situation to work with an wired interface when working from an desk or a fixed location (which is usually better than using WiFi) but sometimes wanting to stand up, take the computer and - without any service interruption - move to a different location while communicating via WiFi.

Normally this involes disconnecting ethernet and then connecting to WiFi (getting a new IP adress, re-configuration of routes, etc.) with dropping of all active connections which disrupts for example file copies, video conferences, voice chats, SSH sessions, etc.

One can solve this by using the link aggregation interface with it’s failover interface with cloned MAC adresses on the interfaces. The basic idea is to set the same MAC on the WiFi interface as on the ethernet interface, attach both to the lagg interface and set the aggregation rule to failover.

The basic requirement for this to work is that WiFi and Ethernet are located on the same switched IP subnet - if you’re switching VLANs or are located in different IP segments this does not work!

The link aggregation interface provides multiple modes of operation:

In most cases one will want to use failover for the described scenario. One might also want to receive frames on all active interfaces to reduce packet loss when switching from WiFi back to ethernet which is not enabled by default when configuring failover. This behaviour can be configured when setting the to non-zero.

Configuring in rc.conf

To permanently enable link failover one can configure this inside /etc/rc.conf.

First one has to create a cloned lagg interface:


Then the WiFi interface should be created and it’s MAC address will be set to the ethernet MAC of the ethernet interface:

create_args_wlan0="wlanaddr XX:XX:XX:XX:XX:XX"

All attached interfaces will have to be up, the WiFi interface normally should have WPA enabled when using wpa_supplicant:

ifconfig_wlan0="up WPA"

Then one can attach them to the lagg0 interface:

ifconfig_lagg0="up laggproto failover laggport em0 laggport wlan0 DHCP"
ifconfig_lagg0_ipv6="inet6 accept_rtadv"

Then one can restart networking:

/etc/rc.d/netif restart

This should be sufficient to use lagg for WiFi failover.

If one wants to accept traffic on every interface also in failover mode one can add the following line to /etc/sysctl.conf:

If one wants to enable this behavioru at runtime without rebooting, one should execute


This article is tagged:

Data protection policy

Dipl.-Ing. Thomas Spielauer, Wien (

This webpage is also available via TOR at http://rh6v563nt2dnxd5h2vhhqkudmyvjaevgiv77c62xflas52d5omtkxuid.onion/

Valid HTML 4.01 Strict Powered by FreeBSD IPv6 support