cannot reached to local network from another site when enabled failover

[dimsum]

Hello,

I have a problem when I enabled failover on my firewall rule below.

🔒 Log in to view

When I using failover I cannot ping or access to local network e.g. site A cannot ping to local network on site B

It's a limitation or I'm missed configure. any idea please help.

Thanks.

[viragomann]

@dimsum
A filter pass rule with a gateway or group stated (policy routing) directs any matching traffic to this gateway.

For traffic which must not pass this gateway, you have to create additional rule and put it above of the policy routing rule.
This also concerns access to pfSense itself.

So if the remote network is 10.0.0.0/24, add pass rule to the top of the rule set and state this subnet as destination.

[dimsum]

@viragomann
I have checked the system log and the policy was passed but I got a ping timeout.

🔒 Log in to view

[viragomann]

@dimsum said in cannot reached to local network from another site when enabled failover:

I have checked the system log and the policy was passed

For sure, the traffic was passed, since your rule allow any to any. But the packets are directed to the gateway you've stated in the rule. Hence it can never reach the remote site.