Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Gateways and WAN_DHCP6

    Scheduled Pinned Locked Moved General pfSense Questions
    2 Posts 2 Posters 1.7k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • S
      smoothmove
      last edited by

      Hi folks, still getting used to pfsense after moving from smoothie. Anyway was wondering if there are any security best practice I should be aware of when setting the gateway for both LAN & OPT interfaces. Is it normal for them to share the same gateway? Looking at my question, I'm doubting if I should even be asking this but I'm sure in smoothwall I'd set a different gateway depending on which LAN/DMZ subnet I was configuring.

      Also, just setup pfsense on another PC and noticed that there are now 2 entries under gateways. My regular WANGW and a new WAN_DHCP6 entry. I've disabled everything IPV6 on of sense so was wondering if there were any negative security side effects of it being there as I can't seem to get rid of it…

      Just realised that I hadn't changed the IPv6 configuration type drop down box to 'None' under the WAN interface page. Now I've done that it's disappeared.

      Be gentle!
      Cheers

      1 Reply Last reply Reply Quote 0
      • P
        phil.davis
        last edited by

        Not quite sure what gateway you are referring to here. The normal situation is:
        a) Each WAN will have a gateway, which is the upstream IP address of the ISP router (either set statically on the WAN interface settings or received from the ISP via DHCP on WAN interface).
        b) Each LAN will have an IP address on pfSense in a different private subnet. That IP address will be given out as the client gateway by DHCP server on the LAN to DHCP client systems that ask, and any clients on the LAN that set their IP address statically will (shoudl) also statically set the pfSense LAN IP as their gateway.

        A LAN on pfSense will NOT have a gateway specified on its interface configuration page.

        As the Greek philosopher Isosceles used to say, "There are 3 sides to every triangle."
        If I helped you, then help someone else - buy someone a gift from the INF catalog http://secure.inf.org/gifts/usd/

        1 Reply Last reply Reply Quote 0
        • First post
          Last post
        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.