Routing problem between two pfsense and vpns
-
Hello,
we have two pfSense with this configs:#------------------------------------------------
Pfsense1 (10.128.0.251):- WAN: x.x.x.220/29 next hop x.x.x.217/29
- LAN: 10.128.0.0/24
- IPSEC:
- 172.16.48.0/23
- 192.168.72.0/23
- 172.23.56.206/32
- OPENVPN:
- TUN 172.26.90.0/24
- TUN 172.26.91.0/24
NAT outbound: automatic
Rules:
- LAN ipv4* * * * * *
- IPSEC ipv4* * * * * *
- OPVNPs ipv4* * * * * *
#------------------------------------------------
and
#------------------------------------------------
pfSense2 (10.128.0.1):- WAN: x.x.x.219/29 next hop x.x.x.217/29
- LAN: 10.128.0.0/24
- LAN+vlan10: 10.130.0.0/24
Rules:
- LAN ipv4* * * * * *
NAT outbound: automatic
Static route:
- 172.16.48.0/23 => 10.128.0.251
- 192.168.72.0/23 => 10.128.0.251
- 172.23.56.206/32 => 10.128.0.251
- 172.26.90.0/24 => 10.128.0.251
- 172.26.91.0/24 => 10.128.0.251
#------------------------------------------------
The Lan's clients and servers have gateway: 10.128.0.1
Until last week the pfsense2 (10.128.0.1) did not exist, and on first gateway we had all services and lan machines. I'd the need to divide the traffic due to excess load on LAN interface.
My problem is this: for example, from an ipsec machine (172.16.48.103) OR openvpn machine (72.26.90.3) I reach the two pfsense, I ping all pingable LAN's clients, but I don't access any TCP/UPD services (web, RDP.. ecc..) from clients/servers who have 10.128.0.1 as gateway, but only server who have 10.128.0.251 as gateway.
All internal Lan's clients (also all clients who have gateway .0.1) reachs remote services gettings from external IPSEC!It seems the last back packet don't reach the origin caller from remote site, but it was routed through WAN, not in the tunnels..
Can you help me?