Navigation

    Netgate Discussion Forum
    • Register
    • Login
    • Search
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search

    Dedicated Management Interface Routing Conflict

    Routing and Multi WAN
    2
    3
    196
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • P
      pfsenseuser5767 last edited by

      I'm wondering if it's possible to setup a dedicated
      PFsense management interface that bypasses static routes on the
      LAN Interface.

      Here's my setup.

      Layer 3 switch with 3 VLANs & Intervlan routing enabled.

      VLAN 10(Servers)     SVI: 10.10.10.1 /24
      VLAN 20(Workstations)    SVI: 10.10.20.1 /24
      VLAN 30(Management)    SVI: 10.10.30.1 /24
      Routing Port(Internet Access): 10.0.0.2  /30

      All internet destined traffic from the VLANs is routed to the PFSense LAN Interface.
      ip route 0.0.0.0 0.0.0.0 10.0.0.1

      PFSense box has (3) Nics.
      (1) WAN Interface goes out to ISP: Public IP

      (2) LAN Interface (10.0.0.1/30) connected to the routed port on the switch: 10.0.0.2/30
          Static routes are setup on the PFSense LAN interface to route traffic back to GW: 10.0.0.2/30 for
          VLAN 10: (Servers)
          VLAN 20: (Workstations)
          VLAN 30: (Management)

      (3) Opt1 Interface: 10.10.30.2 (Conflict)

      I would like to use Opt1 as a dedicated PFSense Mgmt Port
      assigned to VLAN 30 with IP: 10.10.30.2.
      Does not need Internet Access.

      Everything works fine.
      But I can't assign PFSense Opt1 Interface IP: 10.10.30.2 because it conflicts
      with the static route on the PFSense LAN interface.
      Is there any way to get around this & assign the Opt1 an IP in VLAN 30(Management)?

      1 Reply Last reply Reply Quote 0
      • V
        viragomann last edited by

        No, that's not possible.
        You may delete the route for VLAN 30, then you are able to assign VLAN 30 to OPT1. But if you do so, traffic destined to that VLAN goes out on OPT1.

        1 Reply Last reply Reply Quote 0
        • P
          pfsenseuser5767 last edited by

          That's unfortunate to hear.
          Okay. Thanks for the clarification.

          1 Reply Last reply Reply Quote 0
          • First post
            Last post

          Products

          • Platform Overview
          • TNSR
          • pfSense Plus
          • Appliances

          Services

          • Training
          • Professional Services

          Support

          • Subscription Plans
          • Contact Support
          • Product Lifecycle
          • Documentation

          News

          • Media Coverage
          • Press
          • Events

          Resources

          • Blog
          • FAQ
          • Find a Partner
          • Resource Library
          • Security Information

          Company

          • About Us
          • Careers
          • Partners
          • Contact Us
          • Legal
          Our Mission

          We provide leading-edge network security at a fair price - regardless of organizational size or network sophistication. We believe that an open-source security model offers disruptive pricing along with the agility required to quickly address emerging threats.

          Subscribe to our Newsletter

          Product information, software announcements, and special offers. See our newsletter archive to sign up for future newsletters and to read past announcements.

          © 2021 Rubicon Communications, LLC | Privacy Policy