Subnet routing within the same LAN

[Mac101]

Hi All,
I'm new to pfSense but learning quickly. I have most of my lan on 192.168.1.0/24 network and a couple of devices on 192.168.2.0/24 network. I am trying to set up routing between the 2 but coming a bit unstuck. My primary gateway in on 192.168.1.254 and I have created a secondary gateway on 192.168.2.254. then added a default route to 192.168.2.0/24 via 2.254 GW. when I do a tracert each hop is stuck on the 192.168.1.254 GW.

some pointers to get me on the right track would be greatly appreciated

[NogBadTheBad]

Post your firewall rules from each LAN

[Mac101]

Here is my firewall rule list. It is pretty basic at the moment for testing. I have even tried disabling the firewall completely under System/Advanced/Firewall & NAT

[Mac101]

I have also selected the below option

[jahonix]

Hmm, you only have one LAN interface in your rules tab, no OPT1 or so. Where do you connect 192.168.1.0/24 and 192.168.2.0/24 to?

Each subnet must enter on its own interface, physical or virtual doesn't matter.

[Derelict]

That is not sound design. You don't put two IPv4 subnets on an interface like that in anything more than to maybe get through a renumbering transition. And even then you don't expect to be able to "route" between them.

Use two interfaces or VLANs + a managed switch.

There's a reason it is giving you trouble. You're not supposed to do it that way.

[Mac101]

Thanks, that makes sense. I thought that by having a second gateway defined under system/routing/gateways I was effectively creating a virtual interface. So how do I create a virtual interface?

[johnpoz]

You create a vlan interface, and get a switch that supports vlans.

[jahonix]

@johnpoz said in Subnet routing within the same LAN:

You create a vlan interface, and get a switch that supports vlans.

vice versa

[Derelict]

Or use another physical interface to another dumb switch.

[Mac101]

Thanks guys,
I have started reading through the pfSense book and it is now starting to make sense. I can see that my original plan was a terrible idea, having multiple subnets on the same broadcast domain. I have started setting up using vlan tagging, but will focus on reading more before I get too indepth

Thanks Again
Darren

[johnpoz]

ou can tag all you want - doesn't mean anything if your switch doesn't support vlans