Navigation

    Netgate Discussion Forum
    • Register
    • Login
    • Search
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search

    Static Route Not Working

    Routing and Multi WAN
    3
    3
    1567
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • M
      mystycs last edited by

      I am trying to setup a Static Route but its not working. Am i doing this right?

      My pfsense IP is 192.168.45.1

      And i connected a Router to my LAN side with the IP 192.168.75.1

      This is what i setup.

      Under Gateway

      Under Routes

      Basically i want to be able to Ping my linksys with tomato (192.168.75.1) from pfsense (192.168.45.1)

      1 Reply Last reply Reply Quote 0
      • K
        kejianshi last edited by

        Here is what I do not understand with openvpn clients and people with all their routing issues.  I have had pfsense running as servers to openvpn clients for ages and I have never had to set up not one single special route ever and I can ping not only the pfsense router, but any of the many subnets running on it.  Matter of fact the only way I've ever not not been able to hit every single network running on my pfsense is if I set up firewalls to specifically prevent it.

        I think people are doing some basic thing wrong.

        1 Reply Last reply Reply Quote 0
        • S
          s.serber38 last edited by

          Hello,
          I have the exact same issue:
          My Internet GW (default gateway): 192.168.1.1
          My pfsense (WAN interface): 192.168.1.3
          My Local Network: (pfsense LAN interface: 10.55.2.254) 10.55.2.0/24

          I have no NAT because all NAT is on Internet GW (192.168.1.1)

          I have another router for routing other LANs
          Router: 192.168.1.2
          Network behind this router: 172.16.0.0/16 (ip: 172.16.1.254)

          In pfsense, i have configured:
          2 gateways:
          WANGW (Default GW) -> Inerface WAN -> GW 192.168.1.1
          ROUTERGW -> Inerface WAN -> GW 192.168.1.2

          1 static route:
          172.16.0.0/16 -> GW: ROUTERGW

          No Outbounf NAT, No 1:1 NAT, no Port Forwarding
          FW Rules (no gateway specifies, so no PBR):
          WAN:
          Any accept (Accept * * * * * * no queue)
          LAN:
          Any accept (Accept * * * * * * no queue)

          Routing table:
          netstat -rn
          Routing tables

          Internet:
          Destination        Gateway            Flags    Refs      Use  Netif Expire
          default            192.168.1.1        UGS        0    26495 vmx3f1
          10.55.2.0/24      link#2            U          0  133740 vmx3f0
          10.55.2.254        link#2            UHS        0        4    lo0
          127.0.0.1          link#5            UH          0      66    lo0
          172.16.0.0/16      192.168.1.2        UGS        0      662 vmx3f1
          192.168.1.0/24    link#3            U          0  393896 vmx3f1
          192.168.1.3        link#3            UHS        0        0    lo0

          => Seem to be OK

          I have a computer with IP 172.16.1.40
          Ping from 172.16.1.40 to 192.168.1.1 => OK
          Ping from 172.16.1.40 to 192.168.1.2 => OK
          Ping from 172.16.1.40 to 192.168.1.3 => KO

          Ping from pfsense 192.168.1.3 to 192.168.1.1 => OK
          Ping from pfsense 192.168.1.3 to 192.168.1.2 => OK
          Ping from pfsense 192.168.1.3 to 172.16.1.40 => KO

          Now, from 172.16.1.40: ping -t 192.168.1.3
          For tcpdump:

          On the pfsense (interface vmw3f1 is 192.168.1.3):
          tcpdump -ni vmx3f1 icmp and host 172.16.1.40
          listening on vmx3f1, link-type EN10MB (Ethernet), capture size 96 bytes
          10:33:53.978486 IP 172.16.1.40 > 192.168.1.3: ICMP echo request, id 768, seq 5641, length 40
          10:33:53.978527 IP 192.168.1.3 > 172.16.1.40: ICMP echo reply, id 768, seq 5641, length 40

          => Work fine

          On the Router (interfcae seth4 is 192.168.1.2):
          tcpdump -ni seth4 icmp and host 172.16.1.40
          listening on seth4, link-type EN10MB (Ethernet), capture size 96 bytes
          22:03:37.123283 IP 172.16.1.40 > 192.168.1.3: ICMP echo request, id 768, seq 12553, length 40
          22:03:42.885379 IP 172.16.1.40 > 192.168.1.3: ICMP echo request, id 768, seq 12809, length 40

          => Only request, no reply

          On the Internet GW (bge0 is 192.168.1.1):
          tcpdump -ni bge0 icmp and host 172.16.1.40
          listening on bge0, link-type EN10MB (Ethernet), capture size 96 bytes
          08:41:44.023409 IP 192.168.1.3 > 172.16.1.40: ICMP echo reply, id 768, seq 21257, length 40
          08:41:49.505862 IP 192.168.1.3 > 172.16.1.40: ICMP echo reply, id 768, seq 21513, length 40

          => Reply appear here… Not normal because pfsense must route packet to 192.168.1.2 for destination IP 172.16.0.0/16 based on routing table

          Now, i check the box "Disable all packet filtering" in System / Advanced / Firewall/NAT
          All work fine!
          ing from 172.16.1.40 to 192.168.1.1 => OK
          Ping from 172.16.1.40 to 192.168.1.2 => OK
          Ping from 172.16.1.40 to 192.168.1.3 => OK

          Ping from pfsense 192.168.1.3 to 192.168.1.1 => OK
          Ping from pfsense 192.168.1.3 to 192.168.1.2 => OK
          Ping from pfsense 192.168.1.3 to 172.16.1.40 => OK

          So, there is a routing issue, I think based on PBR...

          Anybody can help us?

          1 Reply Last reply Reply Quote 0
          • First post
            Last post