Monitoring IP Not Pingable outside VLAN
-
On my pfSense 2.5.2 I have a VLAN (50) and its interface is designated 192.168.50.1. On this VLAN I have an OpenWRT router with an IP of 192.168.50.4. I defined this second router as a Gateway on pfSense.
I have observed that if I define a monitoring public IP for the OpenWRT gateway (in pfSense) then I can no longer ping that IP unless I am on the VLAN (50) subnet. Can anyone see what might be happening here?
-
When you add a monitoring IP pfSense adds a static route to it via that gateway to ensure it's actually monitoring the correct link.
If you have clients on other subnets, and you don't have any other policy routing for them, traffic to the monitoring IP will be send via the OpenWRT gateway. For that to work you would need outbound NAT from the client subnet or a static route back from OpenWRT.
Steve
-
@stephenw10
Many thanks for the explanation Steve. I can’t tell you how relieved to hear that. I expect that this issue is covered in the pfS document somewhere, but I don’t recall seeing it.
Bruce.
