Netgate Discussion Forum
    • Register
    • Login
    • Search
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    1. Home
    2. Tags
    3. routing
    Log in to post
    • All categories
    • F

      Connect 2 routers but maintain separate internet?
      Routing and Multi WAN • vpn routing multiple pfsens • • F4 0

      3
      0
      Votes
      3
      Posts
      482
      Views

      F

      @steveits

      I may be interested in knowing more. My ATT router has a 5G port that is unused, but only 1 of the 2 routers has 5G capability, the pfSense. The other router is a MikroTik, but none of it's eth ports have 5G.

      For clarity, my pfSense router has a 5G wan input, and 2 10G SFP+ ports as potential outputs.

      I wanted perfect separation at the WAN connection, but I could use the 5G ethernet port on the ATT machine and go to the pfRouter, then split the connection to a second router via SFP+ and then to a switch for VPN access via the 2nd SFP+.

      This would give me 5G all the way to each router, than separate LANs from there.

    • semiraue

      Proper site to site routed openvpn setup
      General pfSense Questions • openvpn site-to-site routing icmp • • semiraue

      1
      0
      Votes
      1
      Posts
      71
      Views

      No one has replied

    • F

      Route throught 2 OpenVPN Connections
      General pfSense Questions • pfsense open vpn routing • • felipefonsecabh

      4
      0
      Votes
      4
      Posts
      135
      Views

      stephenw10

      And that worked?

      If not then check for blocked traffic. Check the state table at both sites make sure traffic is going where you think it should.

      Steve

    • D

      Difficulty routing IPv6 traffic between local interfaces
      IPv6 • ipv6 routing local vlans • • Doktor Jones

      5
      0
      Votes
      5
      Posts
      151
      Views

      JKnott

      @johnpoz
      I'm only using 5 of my 256 /64s. However, I think people have learned a lot of bad habits, with having to conserve IPv4 address space. The only place where a smaller prefix makes sense is with a point to point link, where a /127 is all you need.

    • D

      PFSense IP Block - Wireguard
      WireGuard • bgp ips routing • • dennism14

      6
      0
      Votes
      6
      Posts
      142
      Views

      V

      @dennism14
      Does your home router have a public IP that is it accessible from outside? If he doesn't it won't work with BGP or forwarding naturally.
      In this case you can only go with VPN.

    • R

      Creating Separate Network for VOIP Traffic
      General pfSense Questions • routing firewall voip • • RutReturns

      10
      0
      Votes
      10
      Posts
      212
      Views

      stephenw10

      Yes, you could certainly route between the firewalls. But you need to use a separate transport subnet between the two firewall interfaces and then add gateways and static routes between them.
      That way you avoid asymmetric routing and can properly filter traffic at both ends.

      If they have separate ISP uplinks you can also setup each as a failover for the other.

      Steve

    • J

      GRE tunnel question
      IPsec • gre gif wireguard routing • • jbeez

      1
      0
      Votes
      1
      Posts
      238
      Views

      No one has replied

    • I

      IPsec IKEv2 Mobile Clients - access from client to other client LAN
      IPsec • ipsec remote access routing ikev2 mikrotik • • IPSecMan

      1
      0
      Votes
      1
      Posts
      262
      Views

      No one has replied

    • S

      IPSEC with Nat Translation - no route
      IPsec • ipsec traslation routing • • sdedurana

      2
      0
      Votes
      2
      Posts
      214
      Views

      S

      @sdedurana a error in config. Solved. Please close.

    • G

      Wireguard Routing Problems - Help wanted
      General pfSense Questions • wireguard routing assymetric vpn • • gelcom

      10
      0
      Votes
      10
      Posts
      286
      Views

      G

      @stephenw10 I deleted the WireGuard tunnel then I set it up all over again. Done the same thing at VPS. Rebooted remote VM and pfSense and it started working.

      I have no idea what happened before but I thanks you for all the support you provided!!

      Thanks a lot

      :-)

      kind regards

    • M

      Routing to Openvpn Client
      OpenVPN • openvpn client routing • • m229m

      2
      0
      Votes
      2
      Posts
      333
      Views

      V

      @m229m
      Either set up the OpenVPN server on the router (default gateway) or set up a transit network on the router and move the VPN server into it.

      Your setup ends up in asymmetric routing issues.

    • A

      Slow traffic on VLANs (smb, sql, dns)
      L2/Switching/VLANs • routing vlan protocols slow speed • • adminproconer

      6
      0
      Votes
      6
      Posts
      381
      Views

      johnpoz

      @adminproconer And how about you remove the link aggregation..

      If still slow then I would sniff - but if you have full speed, and ping is 1ms - your issue is not network related, but most likely server or performance related.

      Sniff to see what is slow, nothing the network the router can do if server answers slowly.

    • L

      Captive Portal on specific VLAN prevents routing to other networks (since 22.01)
      Routing and Multi WAN • captiveportal vlan routing • • lorenzom

      4
      0
      Votes
      4
      Posts
      369
      Views

      L

      @gertjan The suggested system patch fixed the issue. Thank you!

    • F

      WireGuard Asymetric NAT Issue when port forwarding from external server
      WireGuard • pfsense 2.6.0 wireguard nat routing • • flewid

      2
      0
      Votes
      2
      Posts
      875
      Views

      F

      For anyone else finding this thread. I've found the solution.

      Create a port forwarding rule

      INTERFACE: WG0
      PORT: 44158
      DESTINATION: WG0
      DEST PORT: 44158
      REDIRECT TARGET IP: MINER IP
      REDIRECT PORT: 44158

      Then everything works as expected.

    • JeGr

      Pot. Bug: OSPF routes via OVPN lost or not refreshed in routing table
      FRR • frr pfsense 2.5.2 ospf openvpn routing • • JeGr

      5
      1
      Votes
      5
      Posts
      680
      Views

      W

      @mdomnis I have since upgraded to 22.01 with FRR version 1.1.1_6. In my preliminary testing, the routes seems to be working closer to what is expected. I still have a weird issue where sometimes the neighbors don't like to peer fully and I have to force restart FRR, but from some quick tests, it looks like at least the route is being added to the table correctly. For now at least.

    • T

      Ipv6 adresses from the same home?
      IPv6 • ipv6 routing • • tk91

      11
      0
      Votes
      11
      Posts
      735
      Views

      T

      Thank you all for your answers and discussion. Unfortunately it’s a “real problem”. There is a person who I trusted before but this person is now in suspicion for a bad deed. While changing my passwords (way too late I did that) I saw a log in to my personal account that was definitely not made by myself. It’s possible that that person had an auto login but I also had the hunch this person spied my personal mailbox (which is of great concern because I was in touch with official entities). Well I think the chance is quite low I forgot to logout somewhere and that that device has the same /56 prefix as that person. So I can just hope that was an auto login or that person did not found anything. Thank you all.

    • 5

      isp change ip
      Firewalling • isp issues change ipv4 routing routing opt1 • • 583245d

      7
      0
      Votes
      7
      Posts
      418
      Views

      5

      @johnpoz excatly , so i can change the gateway in routing of this isp , and under interface assimgnets, change the ip ,and add the new gateway that was given by isp.

    • M

      Remote OVPN Client access devices in Remote LAN over OpenVPN Site2Site link?
      OpenVPN • openvpn openvpn client site-to-site routing • • mpcjames

      4
      0
      Votes
      4
      Posts
      447
      Views

      johnpoz

      @mpcjames glad I could help.

    • U

      DMZ connections throttled
      Firewalling • routing dmz firewall • • uruloki

      4
      0
      Votes
      4
      Posts
      383
      Views

      U

      @SteveITS From what I can tell, drivers are up to date.

    • H

      New gateway causes all traffic to be rerouted
      Routing and Multi WAN • gateway vpn routing • • HybridX

      2
      0
      Votes
      2
      Posts
      365
      Views

      Rico

      Make sure you have the Don't pull routes option checked in your OpenVPN Client configuration:
      pfSense_Dont_pull_routes.png

      -Rico

    • R

      Help please: Why are these rules isolating IoT not working?
      Firewalling • routing firewall rules iot guest • • rennit

      34
      0
      Votes
      34
      Posts
      912
      Views

      R

      Very thankful for this discussion. Provided a much greater understanding of many things and overall.

      For those reading: As to this specific issue, one that I saw many posts about, but this solution I have not seen:

      Just found this under logs-->firewall-->settings. I tested it and worked for the noise. Just don't know if will be losing any other and important logging with it. Looking at default block rules I do not think so, but not sure.

      Screen Shot 2021-09-28 at 08.20.10.png

    • R

      Test inter-LAN/VLAN Routing to Verify Firewall Rules
      Firewalling • vlan firewall rules testing routing • • rennit

      1
      0
      Votes
      1
      Posts
      219
      Views

      No one has replied

    • hydrian

      Slow inter-VLAN Traffic
      L2/Switching/VLANs • vlan performance routing • • hydrian

      2
      0
      Votes
      2
      Posts
      389
      Views

      hydrian

      Nevermind. It was traffic shaper mucking me up.

    • N

      pfsense on an mpls network
      Routing and Multi WAN • pfsense firewall routing • • Norcarde

      1
      0
      Votes
      1
      Posts
      188
      Views

      No one has replied

    • S

      SSH/RDP not working over OpenVPN in a Bridged LAN
      OpenVPN • openvpn routing nat routing • • sakthi

      13
      0
      Votes
      13
      Posts
      577
      Views

      johnpoz

      If they are different interfaces and not switch ports - then no there is no way to put them on the same network without bridging them.

      But the only reason you need for them to be on the same network is broadcast traffic.. They could be on different networks and still access everything on the other network. Just create any any rules.

      Do these devices use some broadcast/multicast discovery or protocol that is required that they are required to be on the same network..

      If want to leverage your ports for individual devices - ok... But why do you need to bridge them.. Just use 192.168.1/24 on 1 and 192.168.2/24 on 2.. And use an any any rule - there you go these devices can talk to each other for anything other than broadcast traffic.

      Bridge is only going to complex up the config, and more overhead for what? Are you doing something that requires broadcast to work? Then get a switch... Really the only time it makes sense to leverage a bridge is media conversion...

      Or I had something that required the devices to be in the same broadcast domain, ie the same L2 network.. But I also wanted to be able to firewall between them for some stuff. In that case you would use a bridge (transparent firewall) and be able to do such a thing. But just wanting to leverage the ports on your pfsense box.. I don't see the point of trying to bridge them?

    • charles_moody

      DNS PROBLEM WITH 'LINUX VM INSTEAD OF ROUTER' | UNBOUND
      DHCP and DNS • dns unbound routing • • charles_moody

      11
      0
      Votes
      11
      Posts
      427
      Views

      johnpoz

      You do not need to create a nat - but if your policy routing, then yes you need a rule above that policy route rule that allows where your trying to go before you policy route out a vpn.

      https://docs.netgate.com/pfsense/en/latest/multiwan/policy-route.html#bypassing-policy-routing

    • V

      Mapping WAN IP's from a VPS directly to local Host ?
      Routing and Multi WAN • routing wan ip • • vlan1

      4
      0
      Votes
      4
      Posts
      640
      Views

      V

      @vlan1 said in Mapping WAN IP's from a VPS directly to local Host ?:

      The question for me is, how do I assign the pfsense my WAN IP's ?

      The WAN IPs have to stay on the VPS, where you run an OpenVPN server. Your pfSense connect to this server and set it as default gateway.
      So any outgoing upstream packet from your home is dericted over the vpn and goes out to the internet with the static public IP of VPS.

      The other way around you can use the public IP for your services like you do already, but incoming traffic on the VPS is forwarded directly to your server at home.
      So you have only one time to nat the traffic in each direction like you was having the VPS public IP at home.

    • charles_moody

      Static Routing | ZeroTier
      pfSense Packages • routing vlan zerotier • • charles_moody

      1
      0
      Votes
      1
      Posts
      227
      Views

      No one has replied

    • L

      Virtual IP Consistently Loses Connection
      HA/CARP/VIPs • routing vip • • Lamia

      9
      0
      Votes
      9
      Posts
      589
      Views

      L

      @kiokoman Thank you Sir. You're correct.

      I can see from here - https://www.calculator.net/ip-subnet-calculator.html?cclass=any&csubnet=29&cip=155.70.7.55&ctype=ipv4&printit=0&x=109&y=13 -
      that the first usable is 155.70.7.49, which will be the ISP router (pfSense default gateway) set into the WAN interface. Can I rather use 155.70.7.48, the network address in a bid not to waste IP addresses?

      Invariably, is this how to reuse IPs (network and broadcast addresses)?

      Pardon me, it was indeed 155.70.7.56/29. And sorry, I'm trying to learn the IP addresses by heart. In this case, can I use 155.70.7.56 in the WAN as against 155.70.7.57, the first usable IP? I'm trying to maximize the IP addresses.

    • L

      Virtual IP frequently loses Connection
      Firewalling • firewall routing virtual ip • • Lamia

      1
      0
      Votes
      1
      Posts
      163
      Views

      No one has replied

    • G

      Can't connect to internet hosts when VPNed into internal VPN Server behing PFSense Router
      Routing and Multi WAN • openvpn routing routing • • grillp

      3
      0
      Votes
      3
      Posts
      232
      Views

      G

      OK, I worked it out!

      I had the following Firewall rule for LAN:

      Screen Shot 2021-04-06 at 8.17.46 pm.png

      But of course, the 10.8.0.0/23 and 10.9.0.0/23 (I changed them to /23 instead of /24) are not in the "LAN Net", so I had to add extra rules to allow that traffic out:

      baecb64d-b9fb-4d84-b216-035dbd903399-image.png
      That as well as the static routes fixed it!

    • Oceanwatcher

      Not able to route through non-default WAN
      NAT • dual wan routing default route • • Oceanwatcher

      3
      0
      Votes
      3
      Posts
      225
      Views

      Oceanwatcher

      @serbus Just saw the latest video from Tom Lawrence and it seems to be a bug in the software we are using. So the solution will be to roll back.

    • operator2024

      IPsec routing between 3 networks.
      NAT • nat ipsec routing • • operator2024

      3
      0
      Votes
      3
      Posts
      268
      Views

      P

      @operator2024 Hi
      I have same situation, no matter what I do I can't get a second phase 2 to come up when it uses a subnet that doesn't directly exist on a local interface.
      could you please tell me what exactly you did so i can compare with my conf

      in my case i have
      Palo Alto --- IPsec ---- Pfsense --- IPsec --- AWS

      Pfsense --- IPsec ---- Pfsense --- IPsec --- AWS

      both don't work
      could you please help

    • M

      PPP link automatically exits gateway group
      Routing and Multi WAN • routing multi wan pppoe • • Moullick

      1
      0
      Votes
      1
      Posts
      145
      Views

      No one has replied

    • J

      Firewall Rules not applying to http traffic
      Firewalling • firewall rules gateway routing • • jack7076

      9
      0
      Votes
      9
      Posts
      285
      Views

      H

      @jack7076 transparent squid does not work with policy routing. Squid binds to wan. Policy routing is done before it reaches wan

    • semiraue

      Route openvpn client traffic through another openvpn client
      General pfSense Questions • routing nat gateway openvpn site-to-site • • semiraue

      14
      0
      Votes
      14
      Posts
      857
      Views

      stephenw10

      Do you see it being routed in packet captures or the state table when you try to reach 1.1.1.1?

      Where does it fail?

    • N

      Is it possible to NAT all the OpenVPN clients to LAN addresses?
      OpenVPN • openvpn nat routing • • nuclearstrength

      3
      0
      Votes
      3
      Posts
      248
      Views

      N

      @viragomann thank you for the suggestion, I am gonna give it a try, we should fix the issue by having the remote endpoint add a phase 2 for the openvpn subnet but in the meantime this should fix it as well.

    • J

      OpenVPN LAN can't talk to VPN Clients
      OpenVPN • routing vpn • • jrj2011

      7
      0
      Votes
      7
      Posts
      335
      Views

      J

      Thanks for all your help your comment about the windows firewall got me to look at it a different way. Turns out during one of my previous attempts to get internet to my VPN clients (a different issue not this one) I messed with some other firewall settings and pushed all of the VPN traffic out the WAN interface which worked fine for getting my clients internet access but caused issues when I tried to access the LAN. I removed that and now with the push route command my clients are able to access the Internet and my LAN

    • N

      OpenVPN Clients reach only some remote MPLS addresses, LAN client reach them all
      Routing and Multi WAN • openvpn mpls routing • • nuclearstrength

      1
      0
      Votes
      1
      Posts
      115
      Views

      No one has replied

    • W

      Combining Remote Access VPN with Site-to-Site VPN
      OpenVPN • openvpn routing pfsense site-to-site remote-access • • WoodenGolem

      4
      0
      Votes
      4
      Posts
      339
      Views

      W

      Thank you very much! Your solution fixed my problem! I missed to add the tunnel network to the remote networks on site B.