Different subnets on one interface for Internet



  • Hi all,

    I have set up a PfSense 2.4.4 with a nic for WAN and another for LAN (192.168.1.1).
    Until now, everything worked fine, because all my network assets were with IP like 192.168.0.0/16
    Today I have to add new assets that are connected to my network with VPN.
    Created a new gateway with the router's IP address 192.168.20.254. This router communicates with other ones. For example, the router's IP address on another site is 192.161.20.254
    So in PFSense I created :

    • a gateway (192.168.20.254) on nic LAN
    • a static route to 192.161.0.0/16 via gateway 192.168.20.254
    • I checked the option for bypassing firewall rules on same interface

    As a result, for a computer on the site with IP address 192.161.2.1 (obtained via Windows server DHCP), I can ping every router (192.161.20.254, 192.168.20.254) and I can ping PFSense's IP 192.168.1.1 I can also access network shares or web applications.
    But I can't go on the Internet.
    Moreover, the network is not considered as a domain one (but a public one)
    What do I forget to make it work ? NAT ? FW rule(s) ?

    Thank you for all your replies !



  • You should not have a Gateway on your LAN interface.