Gateway policy routing

slv

Hi

I've got setup 1 LAN and 3 WANs.

WAN 1 is my default gateway.
WAN2 and WAN3 are in multiWan setup.

Source based routing is working fine, but i would go one step further and set rules based on gateway.

My pfSense machine has primary IP 192.168.1.1 and 2 virtual IP's 192.168.1.2 192.168.1.3
If client set default gateway to 192.168.1.2 routing should go via WAN2, and if set gateway to 192.168.1.3 via WAN3

Is it possible to do this?
Maybe other ideas how to redirect traffic changing setup on workstations?

Best regards
Slv

heper

Why?

slv

Some workstations are configured to use multiWan connection only due to generate heavy traffic, but in some cases (firewall rules on the other end) they need to route by specific (not random) gateway.
One WAN2 is static IP, WAN3 is dynamic IP and it is much easier to change gateway on workstations than on router due to high frequency of changes.

viragomann

There's no way for different routing dependent on the incoming address. But it could be done by source addresses.
So just segment your LAN in subnets and add policy routing rules to fit your needs. After, you have control over the routing by changing the clients IP. That won't be a bigger undertaking than changing the gateway.

slv

I was thinking about that, but all workstations must be in the same network…

In other hand I can add another class to each workstation… i't should work.

Thanks for an idea!

viragomann

I meant the segmentation only for rule handling. The whole LAN should stay a broadcast domain, of course.

So e.g. if your LAN is 192.168.1.0/24
You can route traffic from source
192.168.1.192/27 to WAN2
192.168.1.224/27 to WAN3

slv

This type of rules I've used to route traffic via MultiWan because this is default behavior for this subnet.

Now I added 2 virtual IP: 192.168.10.1/24 and 192.168.11.1
Firewall rules are set to route via specific WAN according to source network and this i working fine.

Thanks for an idea.