Two GW in WAN, correct static routes to second GW however default it used

[o1e9]

Hi,

I am setting up static routes on my WAN with two gateways.  One gateway is default ISP and the second is a private network however both are in public WAN net.  I may ping both gateways and of course the default one works flawlessly.

Status shows both gateways online and I have added static rules to direct traffic to 4 IPs to the second gateway so I may access resources in private network via second gateway in WAN network.

All statuses and suggested diagnostics looks good indeed, gateways are online and static routes are up however whatever I do the default gateway is used!  I am running traceroute/tracepath from clients behind the firewall and from pfSense WAN itself but it is always use default gateway and ignores active second gateway and static rules.  I have tried to reboot pfSense of course however the issue remains.

Anyone have any suggestion for a verbose debug I may do to find out where the problem is?

Thanks!
Oleg

[stephenw10]

Hi Oleg,
Check the routing table on the firewall (Diag > Routes) make sure those static routes are present.

You may need additional outbound NAT rules to actually access anything on the private subnet. Devices there may not have a route back to your internal subnet. Or your traffic may be hitting the default outbound NAT rule and being translated to the public IP incorrectly.

Steve