• Failover over with SQUID issue

    1
    0 Votes
    1 Posts
    98 Views
    No one has replied
  • IKEv2 clients receiving routes yet no connectivity

    2
    0 Votes
    2 Posts
    140 Views
    V

    Just needed to add the subnet im trying to reach to my Windows 10 VPN connection and it's now working:

    Add-VpnConnectionRoute -ConnectionName "VPN Name" -DestinationPrefix 10.xx.xx.0/22 -Passthru
  • 0 Votes
    1 Posts
    90 Views
    No one has replied
  • -SOLVED- Dual Wan, failover, not working properly

    3
    0 Votes
    3 Posts
    546 Views
    R

    Just uploaded a video, no, the monitor IP is default. Also, I'm not sure why both gateways show up as online, shouldn't one of them stay in "pending" since they're not on the same tier? I did try using different monitor IP such as google dns servers, but that didn't fix the problem.

  • Safely sub allocating dynamic IPv6/64 network to multiple VLANs

    2
    0 Votes
    2 Posts
    204 Views
    B

    I determined that sometime in the last year my ISP (Cox) made it so I can send a hint for a 56-bit prefix and use track interface to obtain a separate /64 for each of my VLANs. This didn't work a year ago but it does now.

    Oddly enough Cox tech support still says they only issue 64-bit prefixes. However that's not what I am seeing now.

  • 1 WAN with 2 different fixed IP addresses each with unique gateway

    1
    0 Votes
    1 Posts
    98 Views
    No one has replied
  • 2 WANs, DMZ and one LAN

    7
    0 Votes
    7 Posts
    462 Views
    M

    I found the problem, and It was not easy, under firewall -> rules, you have to edit (or create) the rule "default allow LAN to any rule", this one is created in the default LAN by default, either copy the data or create a new one based on that one, but this one is for the second LAN, for my example, the LAN_DMZ, and here is where the tricky part comes: you have to display the advanced options, and there almost at the end there is the possibility to specify the gateway:

    Gateway
    Leave as 'default' to use the system routing table. Or choose a gateway to utilize policy based routing.
    Gateway selection is not valid for "IPV4+IPV6" address family.

    For my example I put as gateway the WAN_DMZ, as this WAN is dedicated to our external services, so all the traffic in this LAN will be redirected to that WAN interface.

    The rest is to add a rule so from LAN1 I can manage the machines in the LAN_DMZ (for maintenance purposes).

    Now a port fordwarding will map the selected port from the outside to the port from the machines in the LAN_DMZ. Another tricky point is that the access from the WAN_DMZ work but if you try to access to the public IP address in the WAN_DMZ from inside the LANs, It will fail. For that you have to add another rule to redirect the traffic, this time from the LAN instead of the WAN_DMZ. This happens because the external IP address is transformed (NAT) to the internal IP addess, and there is no rule to access to the port that It's mapped to access the service from the outside.

    This means, you have to MAP from WAN_DMZ 8080 -> your host 80 but also from LAN1 8080 (self firewall) to your host 80.

    With these two rules and the trick option for selecting the gateway the work was done and everything works as expected.

    Thank you

  • WAN with /29 - public IP for one host

    4
    0 Votes
    4 Posts
    424 Views
    NogBadTheBadN

    https://www.netgate.com/resources/videos/nat-on-pfsense-23.html

  • Inter VLAN Routing - Internet Access

    54
    0 Votes
    54 Posts
    18k Views
    R

    How did you setup your transit in the end? Trying to do the same and it isn't working. Currently using management as my transit. Are you able to describe how you setup the transit as I have contacted netgear and they don't seem to have a concept of a transit vlan and are asking me to create a vlan on pfsense for it.

    Pfsense:
    Pfsense lan default gateway 192.168.10.246

    Created gateway 192.168.10.1 Inc static routes etc on pfsense under routing.

    Switch:

    Created management vlan (15) 192.168.15.0

    Ip: 192.168.15.2
    Default gateway: 192.168.15.1 but it won't let me set it and defaults to 0.0.0.0

    Static route also changes to 192.168.15.1 rarther than 192.168.10.246

    Created vlan (10) 192.168.10.0

    Default gateway 192.168.10.1

    Untagged a port for all vlans and set its pvid to 10. Plugged the pfsense lan port into this switch port (transit link)

    I'm clearly not doing it right please help.

  • Transit vlan between pfsense and Netgear m4300 L3 switch

    1
    0 Votes
    1 Posts
    268 Views
    No one has replied
  • Trouble with routing WAN > LAN

    1
    0 Votes
    1 Posts
    141 Views
    No one has replied
  • 2 WAN gateway group failover - Force state Mark Gateway as Down bug?

    1
    0 Votes
    1 Posts
    91 Views
    No one has replied
  • IPSEC VTI with Dual-WAN configuration

    15
    0 Votes
    15 Posts
    2k Views
    F

    @jimp Deploying the patch, I have encounter an issue when ipsec rules generation is not disabled, since the rules are taking all pfsense traffic (self) for the same destination. I will add into the patch a test in filter.inc to disable the ipsec rules generation just for those phases 1. The option would be, in summary, "allows you to use duplicate gateways but you are responsible for the routing settings".

    If you prefer, I can also change the from clause from the generated rules to use the phase 1 interface address instead of (self) when this option is enabled.

  • Multiple routers, multiple wan failover

    1
    0 Votes
    1 Posts
    183 Views
    No one has replied
  • Port forwarding issue with Multi-Wan Setup

    2
    0 Votes
    2 Posts
    117 Views
    No one has replied
  • Question about broadcast address traffic within a subnet

    25
    0 Votes
    25 Posts
    3k Views
    W

    @johnpoz
    A much appreciated thanks! I have consumed more than enough of your time this evening and have no more questions for you regarding this topic. Definitely do not ignore the wife!! Perhaps I can trouble you again sometime in the future?

  • PC on LAN cannot see other same LAN PCs if connected to VPN

    8
    0 Votes
    8 Posts
    837 Views
    A

    @johnpoz said

    Can not and does not work that way!!! The client either sends the traffic out its local interface, or it sends it down the ENCRYPTED tunnel... The router, can not see traffic in the tunnel... So how would it do anything with it??

    Yeah, stupid me, it seems like I was trying to connect to local wired NAS from wifi laptop, that were on different local subnets. VPN client still allows me to connect local IPs but it knows nothing about separate subnet obviously :)

    Thank you @johnpoz, now I know a tiny bit more about routing and VPNs!

  • Is changing the localhost (127.0.0.1) gateway possible?

    10
    0 Votes
    10 Posts
    2k Views
    J

    @jimp "It's a common misconception that NAT has any influence here, getting over that hurdle early is best." I'm glad you brought it up, I've got the answer to my original question and I've learned how NAT actually works which was something I thought I already knew. Thanks @jimp

  • Multi-wan - OPT1 - Port Forward - not working when WAN gw DOWN

    2
    0 Votes
    2 Posts
    139 Views
    jimpJ

    Sounds like your WAN interface doesn't have a gateway chosen on Interfaces > WAN

  • Public IPs not accessible, FW config or routes?

    1
    0 Votes
    1 Posts
    108 Views
    No one has replied
Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.