Trouble getting only some traffic to route through VPN client
-
Hi there,
I'm trying to get a VPN client set up on my router so that I can route some hosts exclusively through a firewall when going to the WAN but route others through the WAN only. The steps seem pretty straightforward, but I'm running into an issue where all of my WAN traffic is being routed through the VPN client.
Some details about my setup:
- I'm running pfsense build 2.4.5-RELEASE-p1 (amd64)
- My VPN client has been set up and confirmed to work (using a ping test from the VPN subnet)
- I set up a NAT for traffic from the LAN subnets with the VPN interface to go through the VPN
- I set up VLAN 10 and VLAN 50 for testing the policy based routing. VLAN 50 is supposed to use the VPN, VLAN 10 is not.
- VLAN 10 and 50 both are using the VPN (confirmed via curl ifconfig.co, turning off the VPN client and confirming traffic won't send)
- When I check my diagnostics > routes, I see the top rule is a one for traffic with destination 0.0.0.0/1 to use the VPN client.
I have some screenshots here. I get that this is probably a simple mistake, but I'm still new to using pfsense and trying to learn as much as possible. Thanks in advance for any thoughts and suggestions you may have!
-
@treeme said in Trouble getting only some traffic to route through VPN client:
When I check my diagnostics > routes, I see the top rule is a one for traffic with destination 0.0.0.0/1 to use the VPN client.
You may also find another route for 128.0.0.0/1 using the VPN gateway.
So the VPN server obviously pushes the default route to you. To prohibit this, go to the client settings and check "Don't pull routes".
-
@viragomann wow, that was it. when I checked the "Don't pull routes" option, that was exactly what I needed to get it to work. Now, VLAN 10 goes through the WAN and VLAN 50 goes through the VPN. Thanks very much!