Static route without gateway

willmcgregor

Hello,

I have an IPsec VPN setup and working from a LAN subnet 10.0.0.1/24 to a remote subnet 10.8.0.0/24. This works fine and devices on the LAN are able to route traffic to the 10.8.0.0/24 subnet. The problem is that the pfsense box itself cannot reach the gateway without specifying the source IP:

This doesnt work:
pfsense# ping 10.8.0.208

This does work:
pfsense# ping -S 10.0.0.1 10.8.0.208

And manually adding this route fixes the problem:

pfsense# route add -net 10.8.0.208/32 -interface em2_vlan100 <– this being the LAN vlan

What is the 'correct' way to make this change via the web interface since im not able to add a static route without specifying a gateway? This seems similar - https://forum.pfsense.org/index.php?topic=50629.0 but i dont understand how aliases will help me.

Thanks,

Will.

doktornotor

https://doc.pfsense.org/index.php/Why_can%27t_I_query_SNMP,_use_syslog,_NTP,_or_other_services_initiated_by_the_firewall_itself_over_IPsec_VPN