Routing and Multi WAN

• 

  Reminder: Questions involving routing packages go under Packages, not here
  • jimp  

  1
  0
  Votes
  1
  Posts
  25
  Views

  No one has replied

• S

  Routing via a LAN client like it's a Gateway
  • Sebastiaan76  

  4
  0
  Votes
  4
  Posts
  206
  Views

  P

  @Sebastiaan76 would you mind sharing some more details (screenshots maybe?) on how you accomplished this? I'm in a similar situation and am struggling to get things working correctly. Thank you!
• E

  Block traffic/No routing between LANs on pfSense
  • Elrick75  

  5
  0
  Votes
  5
  Posts
  48
  Views

  

  Here.. BTW - blocking bogon on your local networks is going to cause you nothing but grief... there is ZERO reason to block bogon on your local network.. What you think someone is going to connect to your network and start using bogon addresses?
• E

  Internet connexion drop all 10min because my wan IP is on different subnet than default Gateway
  • Elrick75  

  17
  0
  Votes
  17
  Posts
  195
  Views

  

  Well then you changing the cache default time makes no sense how it could fix anything.. Have your isp explain what that setting "fixes" If the mac doesn't change then your cache could be for 10 years ;) Seems like your isp wants to see arps more often than every 20 minutes for whatever reason?
• W

  Multiple LAN subnet with single gateway
  • wasim.ahmed  

  1
  0
  Votes
  1
  Posts
  16
  Views

  No one has replied

• W

  Switching from KPN PPPoE to IPoE
  • wickeren  

  4
  0
  Votes
  4
  Posts
  49
  Views

  

  @wickeren said in Switching from KPN PPPoE to IPoE: and configure the /29 as aliases on the WAN” should work fine? Indeed it should. In theory as they are routed to you, if you do 1:1 NAT or port forwarding with them it should even work without (as the packages will arrive on the WAN of pfsense per routing and can be picked up). But if you configure them they should simply work as before. @wickeren said in Switching from KPN PPPoE to IPoE: Good service! Good lord, why can't we get nice things in germany like that... -.- That's real service for sure!
• 

  Access to Web Gui over ISP WAN Gateway - Rules,NAT?
  • guido_neumann  

  6
  0
  Votes
  6
  Posts
  23
  Views

  

  @guido_neumann said in Access to Web Gui over ISP WAN Gateway - Rules,NAT?: Destination WAN Orbis1 and now i can ping and HTTPS. Destination would be "WAN_ORBIS1 Addr" or "This Firewall". Source should be any because of - you get it - the internet. Or even better, if you access that from a static IP (company etc.) then only allow this or another trusted IP. Much better than just allowing all.
• P

  Setup of SG-3100 after hitting the reset button
  • pctrailrunner  

  5
  0
  Votes
  5
  Posts
  40
  Views

  P

  Thank you, Chris. I was able to download and install the image. All is good!
• S

  Redirecting PC default gateway traffic to the PFsense to another gateway in LAN
  • stepgilb  

  5
  0
  Votes
  5
  Posts
  32
  Views

  S

  @viragomann Thanks, I may just try that.
• N

  Feature request: on startup make CARP start initially for 60s in temporary maintenance mode
  • nzkiwi68  

  5
  0
  Votes
  5
  Posts
  58
  Views

  

  @nzkiwi68 said in Feature request: on startup make CARP start initially for 60s in temporary maintenance mode: Primary comes up, CARP takes over from backup firewall, then takes as long as 1-2 minutes for primary to take over FRR routing, VPNs etc. Nope, nothing the sort here and we run multiple packages on the nodes - but no FRR. OpenVPN, IPSEC, FreeRadius etc. have no problem whatsoever with primary coming back and taking over, seconds later the first VPN connections authenticating via FR are already connected again so I think that could very well point to FRR. As FRR (OSPF?) can take a bit to sort out any other peers, exchange routes etc. that could probably be the culprit - or something slowing the process down.
• G

  Gateway Alarm is causing ipsec tunnels and other stuff to be reset/reloaded? Why?
  • GustavG  

  1
  0
  Votes
  1
  Posts
  16
  Views

  No one has replied

• 

  Using PfSense to serve CGNAT or Dual Stack Lite
  • 0daymaster  

  7
  0
  Votes
  7
  Posts
  45
  Views

  

  My immediate goal in regards to addressing is to make it long enough so that I can purchase a class C IPv4 netblock on the open market. Nothing would make me happier than the death of IPv4 but until then I am forced to support it.
• T

  WAN IP is on different subnet than default Gateway
  • thept  

  13
  0
  Votes
  13
  Posts
  5079
  Views

  E

  Hi to all, I'm facing to the same problem, WAN connexion is droped after 10min, and up after 10 other... I try to add route or modify "Use non-local gateway" in WAN gateway advanced, but it doesn't fix the problem. How can i fix WAN connexion ? Best Regards.
• Q

  Different multi-wan scenario: 2 sites with own internet connection, interconnected
  • quitaiskiluisf  

  1
  0
  Votes
  1
  Posts
  13
  Views

  No one has replied

• G

  unbound dns resolver loses custom config
  • gwaitsi  

  6
  0
  Votes
  6
  Posts
  64
  Views

  

  There is a package called filer, it would allow you to store the contents of a file in the xml, so the file will be created for you after say an update to pfsense.
• T

  WAN failure, reboot fixes it.
  • t__2  

  15
  0
  Votes
  15
  Posts
  134
  Views

  T

  Just to not leave everyone hanging on this, here is the outcome: Got the new router. Restored from backup the configuration file. Switched the interfaces as the SG-5100 is slightly different then the 4860. Plugged everything in and everything seemed to work. That is till 9 am the next work day. Same problem different router, however when it switched to the backup WAN it seemed to connect for a minute or less then it too failed. Rebooted the 5100 and we were back in business on the the main WAN. The backup WAN was connected also. That is until 9 am the next day. Same thing. Some time that day the backup WAN stopped working. Could not get it to work. However the next day at 9 am the main wan did not fail with the cell modem off. Same thing the next day. Without the cell modem no 9 am anomaly. However no back up wan. Over the course of several days I continued to trouble shoot the cell modem. Multiple settings changes, factory resets, every suggestion I could find on the net about this specific modem. However the modem would work just fine plugged directly into a laptop. It worked in router mode as well as bridge mode always on the laptop. I could set it up on the laptop, leave it powered up and quickly plug it into the 5100 and there would be an ethernet connection but would never get an IP. The 5100 would not communicate with the modem no mater what I did. One night at home I thought what if the router had a hardware port problem? Not normal for a new device but possible. Also unusual that it would be the same port that I happened to have the modem connected. So the next morning I logged into the pfsense gui and switched WAN_CELL interface from ix0 to ix2 and plugged the cell modem into ix2. Power up the cell modem and when it finished booting it connected and I had my backup wan again. Netgate support said I should hook up a laptop to ix0, do some changes to the pfsense settings and see if that port can connect to the laptop. Guess what - it would not connect. To triple check I did the same changes to ix1 and plugged the laptop in and it immediately connected. On top of that with a working port and cell modem the 9am anomaly has not occurred again. So I now have an RMA to send the brand new 5100 back. And our repaired 4860 is on it's way back to us. P.S. During this adventure I discovered an anomaly with some settings when you switch interfaces. In System, Routing Gateways, Edit, WAN_CELL, Advanced the Probe Interval and the Alert Intervals switch back to the default values. I would think that they should stay as set to the gateway name. Anyway we are back up for now. I will let you know if anything changes.
• J

  How to route dns queries from one host through a specific interface using DNS Resolver
  • jlroberts  

  2
  0
  Votes
  2
  Posts
  21
  Views

  

  I don't believe that you can dynamically control which interfaces unbound uses for external lookups. Its config allows you to choose which interfaces to use, but no way to change it on the fly.
• L

  Help needed to understand pfSense Multicast and Broadcast behavior.
  • louis2  

  2
  0
  Votes
  2
  Posts
  40
  Views

  L

  Hello, pfSense its firewall- and routing-behavior in regard to multicast and broadcast is still not clear to me. Especially not as soon as it is "above link-local scope". And .... that is where I have problems. I cannot make my media-server (Twonky) visible across subnets or making a SMB3 share visible in another subnet (note that the share is not visible but accessible). I do have some doubts if it is possible to get those things working with actual software. However, I did a lot of research and would like to share some links with you, I did a lot of research and would like to share some links with you, Zero-configuration networking https://en.wikipedia.org/wiki/Zero-configuration_networking#DNS-SD Using pimd https://forum.netgate.com/topic/139218/sonos-speakers-and-applications-on-different-subnets-vlan-s NetBIOS over TCP/IP https://en.wikipedia.org/wiki/NetBIOS_over_TCP/IP IP-V6 multicast http://what-when-how.com/ipv6-advanced-protocols-implementation/ipv6-multicast-address-to-layer-2-multicast-address-mapping/ IPv6 - Addressing Modes etc. https://www.tutorialspoint.com/ipv6/ipv6_addressing_modes.htm IPv6 - Special Addresses https://www.tutorialspoint.com/ipv6/ipv6_special_addresses.htm By the way my media server is using IGMP V3 (the actual standard) and I think IGMP-proxy is not (yet?) supporting that. Sincerely, Louis
• R

  LAN interface fails, reboot or reroot restores connectivity
  • ryanb_matthews  

  1
  0
  Votes
  1
  Posts
  28
  Views

  No one has replied

• G

  small routing problem for package manager.
  • gwaitsi  

  3
  0
  Votes
  3
  Posts
  28
  Views

  G

  that did the job....thanks
• A

  how to assign 2 IP from one subnet for 2 WAN interfaces
  • Ampik  

  4
  0
  Votes
  4
  Posts
  91
  Views

  A

  did just that, and it works fine. @Derelict said in how to assign 2 IP from one subnet for 2 WAN interfaces: Ask them for another subnet on your second WAN
• D

  Cannot ping or get internet to client from Hyper-V Pfsense Server
  • Dominixise  

  3
  0
  Votes
  3
  Posts
  61
  Views

  J

  @Dominixise said in Cannot ping or get internet to client from Hyper-V Pfsense Server: I found out what I was doing wrong and I had a wifi adapter as my LAN interface 192.168.1.1 and I guess those don't work good as sharing so I enabled my other Intel hardwired NIC in Hyper-V and then set it up in Pfsense and now I can get pings and Internet through my LAN. I should have done this from the start but I thought that I needed this second NIC interface for a dedicated connection to my Windows Server 2019 OS. Now I just need to set up rules for my web server and dedicated gaming servers and try out OpenVPN or something like that. Thank you for your update, but It seems that I have that the same problem, the 192.168.1.1 doesn't load for me ! is there any solution for that ?
• G

  Gateway monitor IPs are being put into the routing table
  • GustavG  

  3
  0
  Votes
  3
  Posts
  70
  Views

  G

  Added a script to /usr/local/etc/rc.d to delete those routes after bootup. cat /usr/local/etc/rc.d/delete-dpinger-routes.sh route delete 1.1.1.1 route delete 8.8.8.8 Not sure though if the routes may get re-created when touching something in the webinterface. Could the developers please look into fixing this (i.e. don't create those static routes).
• V

  My pfsense to unifi switch setup doesn't look right
  • vacquah  

  11
  0
  Votes
  11
  Posts
  105
  Views

  V

  Switched to dot1q mode and setup as shown below. got internet connectivity on all clients. On the unifi side of the trunk, all the vlans are tagged ( 99 for management and 1001 - 1005). And yet, the connection seems to be bouncing around the different vlans as before. See the screenshot where the mac address of the SG-3100 is shown on the home network? In a few seconds it will rotate to another of the vlans. Not sure why this is happening ... I am hoping folks here who have setup the same trunk with a unifi switch can explain this or help solve it.
• P

  Is the the dpinger probe interval too low at 500ms?
  • piperspace  

  5
  0
  Votes
  5
  Posts
  35
  Views

  P

  @johnpoz The only load is a Nest security camera uploading at 1.5Mbits/sec. And I have nearly the same same set up at another location on Comcast with no latency problems. I have swapped out the modem (twice) in order to get its report of signal levels closer to what the ISP technician reads on her meter. She has visited twice, verified my cable and checked connections at the pole. The network engineer would like to think the problem is in my router. How would I know if pfsense is disconnecting?
• M

  No internet on VMWARE LAN clients
  • molivier  

  1
  0
  Votes
  1
  Posts
  17
  Views

  No one has replied

• T

  PPPoE - What is a Standard server reply
  • timboau 0  

  3
  0
  Votes
  3
  Posts
  106
  Views

  

  @timboau-0 Did you ever figure this out? I am having a very similar issue (PFsense is picking up a non-static IP via PPPoE with the modem in bridge / pass-through mode). I have been given no gateway either. By adding a static IP did you change PF's WAN to static and then entered your static ISP IP? Or a virtual IP?
• C

  1 card, 2 x DHCP, 2 different IPs
  • clarifix  

  2
  0
  Votes
  2
  Posts
  25
  Views

  C

  @clarifix It turns out this worked because the old firewall is on an ESXI with 2 virtual ethernet interfaces assigned to the same physical card. So... this turns out to be an ESXI trick and not a firewall trick. However, since this is done in software, I am still wondering if it can be done on pfSense.
• T

  pfSense Gateway
  • tobijuan  

  9
  0
  Votes
  9
  Posts
  64
  Views

  T

  @JeGr Thank you sir I'll also try this out
• L

  Two gateways on one WAN interface, failover not working
  • lukasfazik  

  5
  0
  Votes
  5
  Posts
  75
  Views

  

  A workaround could be to put a small/cheap router between one of your WANs and pfSense, aka double NAT. As long as pfSense sees only unique Subnets you are fine. -Rico
• W

  Layer 3 switch to pfsense
  • wolfgangbucher  

  5
  0
  Votes
  5
  Posts
  54
  Views

  W

  Hi, I found the mistake, it was a miss configured tunnel, i had LAN net as source, changed it to 10.30.0.0/16 and now its working. Thanks for spendig time. Cheers Wolfgang
• 

  dpinger high loss values ?
  • chudak  

  10
  0
  Votes
  10
  Posts
  235
  Views

  

  I have changed my monitor ip to 8.8.8.8 and so far don’t see any losses in 2-3 days.
• Z

  A little different network scenario
  • zzleepy68  

  1
  0
  Votes
  1
  Posts
  29
  Views

  No one has replied

• P

  MPLS Load balance & FailOver
  • praveen  

  2
  0
  Votes
  2
  Posts
  26
  Views

  P

  How to configure frr ospf in pfsense, pls. guide
• C

  Multiple public IP multiple routers...
  • cellhelp  

  4
  0
  Votes
  4
  Posts
  38
  Views

  

  If that /27 network is routed to you via another network (/29 I assume as that would be an 8 IP net) then you can simply route it and setup an additional interface with that /27 network as you like. If you got .1 - .31 then just configure pfSense' client interface on .1 and setup manual DHCP for .2-.31 There is no NAT to configure there if you want your clients to have a public IP. As the IP range 1-31 is routed to your WAN IP, there's no NAT on your side to configure (besides NOT doing NAT on the Client interface) and simply hand out the IPs you want (and add firewall rules). You can configure private networks or other things on a separate network/LAN to your likings.
• C

  Solved: Inbound Multiwan Routing Problem
  • Crysion  

  8
  0
  Votes
  8
  Posts
  57
  Views

  

  You're welcome :)
• A

  Dual ISP Speedbooster
  • ajmaltms  

  4
  0
  Votes
  4
  Posts
  51
  Views

  

  @ajmaltms said in Dual ISP Speedbooster: same gateway monitor ip... won't work either as the GW monitor IPs are host based routes out to the corresponding interface. Configuring it twice will try to route it to both WANs and confuse routing. Just use e.g. 1.1.1.1 on one and 1.0.0.1 on the other.
• C

  Gateway group - no go back to tier1
  • cschumann  

  1
  0
  Votes
  1
  Posts
  16
  Views

  No one has replied

• A

  Too many origins for route
  • autumnwalker  

  2
  0
  Votes
  2
  Posts
  49
  Views

  A

  Just started getting this error again. Any thoughts on cause / how to address?
• C

  Routing to wrong interface
  • CyberTiVo  

  19
  0
  Votes
  19
  Posts
  74
  Views

  

  It would make sense in something like a colo or metro-e environment. Or anywhere where RFC1918 is the exception not the rule. Which should be everywhere, actually.