Route is not working until ping command



  • Hi, I have weird problem for me :)

    I am routing local network (eth0) to VPN network (eth1)

    Local network 10.25.1.0/24 - GW 10.25.1.1
    VPN network 10.11.12.0/24 - GW 10.11.12.1

    On VPN network is Cisco ASA on IP 10.11.12.2 - I have this as another GW setup in pfsense.

    Static routes are set: 192.168.1.0/24 via 10.11.12.2

    FW rules set from local network to VPN netork - everything can communicate

    Pass * * * 10.25.1.0/24 to 10.11.12.0/24 * *

    FW rules set in VPN network - everything can communicate to local network and everything can communicate via optional GW 10.11.12.2

    Pass * * * 10.11.12.0/24 to 10.25.1.0/24 * *
    Pass * * * * to * via 10.11.12.2

    Everything looks fine, but commication is working only after I run ping to 192.168.1.X machine.
    Ping is working well, and after ping is working everything, but if I will not use ping first, no communication.

    Can anyone explain me, what is causing thins and how i can fix it?

    Thanks :)



  • I think the problem can be PROXY ARP.

    On the Cisco ASA is proxy arp enabled.

    How is possible enable or check if proxy arp is working on pfsense?


Log in to reply