Bypassing IPsec Site to site based on source IP (PBR)
-
I am clearly missing something being new to PFSense. I have a site to site IPSec (Tunnel IPv4 mode) setup with remote gateway 0.0.0.0/0 and auto-exclude LAN setup. This works great, my internet-bound traffic follows the tunnel, and local traffic stays local. All good.
I have a few devices I'd like to follow the WAN gateway path and not traverse the IPSec tunnel to get Internet access. It seemed simple enough, simply make a LAN IF firewall rule based on source IP, and under advanced options set the gateway to WAN_DHCP. However this doesn't work.
Could someone point me in the right direction?
Thanks!
-
Aha! I think I've got it. By switching to VTi mode I was able to make a gateway interface for it, and then do firewall rules. Not as simple but it works.