Navigation

    Netgate Discussion Forum
    • Register
    • Login
    • Search
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search

    Routing problem between two pfsense and vpns

    Routing and Multi WAN
    1
    1
    84
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • I
      IT_MQ last edited by

      Hello,
      we have two pfSense with this configs:

      #------------------------------------------------
      Pfsense1 (10.128.0.251):

      • WAN: x.x.x.220/29 next hop x.x.x.217/29
      • LAN: 10.128.0.0/24
      • IPSEC:
        • 172.16.48.0/23
        • 192.168.72.0/23
        • 172.23.56.206/32
      • OPENVPN:
        • TUN 172.26.90.0/24
        • TUN 172.26.91.0/24

      NAT outbound: automatic

      Rules:

      • LAN ipv4* * * * * *
      • IPSEC ipv4* * * * * *
      • OPVNPs ipv4* * * * * *
        #------------------------------------------------

      and

      #------------------------------------------------
      pfSense2 (10.128.0.1):

      • WAN: x.x.x.219/29 next hop x.x.x.217/29
      • LAN: 10.128.0.0/24
      • LAN+vlan10: 10.130.0.0/24

      Rules:

      • LAN ipv4* * * * * *

      NAT outbound: automatic

      Static route:

      • 172.16.48.0/23 => 10.128.0.251
      • 192.168.72.0/23 => 10.128.0.251
      • 172.23.56.206/32 => 10.128.0.251
      • 172.26.90.0/24 => 10.128.0.251
      • 172.26.91.0/24 => 10.128.0.251
        #------------------------------------------------

      The Lan's clients and servers have gateway: 10.128.0.1

      Until last week the pfsense2 (10.128.0.1) did not exist, and on first gateway we had all services and lan machines. I'd the need to divide the traffic due to excess load on LAN interface.

      My problem is this: for example, from an ipsec machine (172.16.48.103) OR openvpn machine (72.26.90.3) I reach the two pfsense, I ping all pingable LAN's clients, but I don't access any TCP/UPD services (web, RDP.. ecc..) from clients/servers who have 10.128.0.1 as gateway, but only server who have 10.128.0.251 as gateway.
      All internal Lan's clients (also all clients who have gateway .0.1) reachs remote services gettings from external IPSEC!

      It seems the last back packet don't reach the origin caller from remote site, but it was routed through WAN, not in the tunnels..

      Can you help me?

      1 Reply Last reply Reply Quote 0
      • First post
        Last post

      Products

      • Platform Overview
      • TNSR
      • pfSense
      • Appliances

      Services

      • Training
      • Professional Services

      Support

      • Subscription Plans
      • Contact Support
      • Product Lifecycle
      • Documentation

      News

      • Media Coverage
      • Press
      • Events

      Resources

      • Blog
      • FAQ
      • Find a Partner
      • Resource Library
      • Security Information

      Company

      • About Us
      • Careers
      • Partners
      • Contact Us
      • Legal
      Our Mission

      We provide leading-edge network security at a fair price - regardless of organizational size or network sophistication. We believe that an open-source security model offers disruptive pricing along with the agility required to quickly address emerging threats.

      Subscribe to our Newsletter

      Product information, software announcements, and special offers. See our newsletter archive to sign up for future newsletters and to read past announcements.

      © 2021 Rubicon Communications, LLC | Privacy Policy