Default gateway, subnets and, gateway groups.
I'm facing a problem with subnets and Gateway groups
this is my scenario:
40 subnets class C /24
each subnet corresponds to a VLAN
The routing bwtwen vlans is made by PFsense
2 ISP, both withs statics IP
ISP 1 is default gateway
One gateway group with fail over ISP1=T1 ISP2=T2, same problem with Load balance ISP1=T1 ISP2=T1
all 40 subnets work great and comunicate eachother as i allow it in FW rules with he default gateway
The problem arise when in change de the default gateway to a gateway group, after that i cannot ping from any host in a subnet to any host in other subnet, but i can ping the default gateway of each subnet from amy other subnet.
What i'm missing?
Thanks and regards.
You need to setup rules to bypass policy routing for local traffic.
If your rules on a VLAN interface say "pass anything from this network to anywhere using <gateway group>" then that's what it's doing -- nothing is saying that it's OK to pass the local traffic without a gateway set.
So you need multiple rules, for example:
- Pass from this network to <all local networks> -- no gateway set (default)
- Pass from this network to any -- gateway set to your gateway group