Routing with multiple gateways on a single WAN intarface

edeclipseit

See attached

I was using tracert in Windows.

Thanks

![LAN FW RULES.PNG](/public/imported_attachments/1/LAN FW RULES.PNG)
![LAN FW RULES.PNG_thumb](/public/imported_attachments/1/LAN FW RULES.PNG_thumb)

johnpoz

So the client your forcing out the gateway is the client your doing the traceroute from is 192.168.1.245.. It didn't happen to get a different IP did it? ;)

You have no rules in floating? Its not doing the traceroute via ipv6 is it? ;)

What does your outbound nat look like, you are allowing this client to be natted out your 2nd gateway? You would need to go into hybrid or manual to allow that, etc.

edeclipseit

Yep, the client IP is another router with it's WAN sat on the 192.168.1.0 subnet. It's definatly got the correct IP.

There's nothing in floating, and not tracert'ing oper IPV6 as I only get response from IPV4

Outbound NAS is at default currently (See Attached). What do I need to change to allow traffic out?

Thanks

obnat.PNG_thumb

edeclipseit

Any Ideas?

johnpoz

your outbound nats do not show this other gateway as a way to nat..

You need to enable an hybrid nat to allow your lan to nat via this other gateway when you send it that way.

edeclipseit

OK, so I've enabled hybrid outbound NAT & gone to add the extra rule to send traffic from 192.168.1.245 out through the 192.168.50.1 gateway. But I can't see where to specify the gateway.
Only where to specify the interface on the PF box itself. Bear in mind, I only have one WAN interface configured, then 2 gateways accessible behind that gateway.

Attached screenshot with my new rule.

opnatrule.PNG_thumb

edeclipseit

Any Idea's John?

johnpoz

My bad… I just read this over again.. I was thinking you actually had another interface for your gateway... Doh... If that was the case then you would need the outbound nat thing picking that interface.

But you only have the 1 interface and just sending to specific gateway..

So your not using any sort of proxy.. And when you got to whatsmy ip you see the correct IP for using gateway 2, but when you do traceroute your getting gateway 1.. I will really have to lab this because should work. as you have it setup.

edeclipseit

Yep. That's it. No proxy or anything. Just trying to send to another gateway.

johnpoz

If I get a chance this afternoon I will fire up a VM to lab this out.. I had done this before another thread but it was 2 different interfaces

edeclipseit

That would be great. Might see if I can spin up a test setup & see what happens.