Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    IP Alias Route Issue - Possible Bug

    Scheduled Pinned Locked Moved Routing and Multi WAN
    6 Posts 2 Posters 1.0k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • R
      Rhongomiant
      last edited by

      I am using pfSense 2.1.5 in a multi-wan setup. I created an IP Alias on the 1st WAN interface to get to an alternate IP used for managing the cable modem. I changed the IP Alias to use the 2nd WAN interface and found that I was still connecting to the cable modem on the 1st WAN interface. When I looked at the route table the IP and network route statements were still set to the 1st WAN interface. I deleted the IP Alias and the IP and network route statements were still there and set to the 1st WAN interface. I created the IP Alias again using the 2nd WAN interface and that changed nothing.

      I am applying changes giving pfSense time to actually apply the changes.

      The logs show no errors.

      I have not yet tested this issue using other IP types.

      I have to reboot to get the route statements to change. Is this a bug or am I missing something?

      Thanks,

      Chris

      1 Reply Last reply Reply Quote 0
      • R
        Rhongomiant
        last edited by

        This problem exists in 2.2 as well. A router/firewall should not have to be rebooted because when subnets are added, routes are created that are not removed when the subnets are removed.

        Rhongomiant

        1 Reply Last reply Reply Quote 0
        • C
          cmb
          last edited by

          Is that same IP subnet on both WANs?

          What you're describing would only happen if the IP failed to be removed from the original interface (which would log to the system log), or if there is another IP on that interface in that subnet. Does ifconfig reflect the IP only on the appropriate interface?

          1 Reply Last reply Reply Quote 0
          • R
            Rhongomiant
            last edited by

            cmb,

            Thanks for the post. There is no errors in the logs and this is reproducible 100% of the time on multiple systems running pfSense 2.1.5 and 2.2.

            Below is what shows up in the route table if I add an IP alias.

            192.168.100.0/24 link#25 U 681 1500 em1_vlan5
            192.168.100.161 link#25 UHS 0 16384 lo0

            If I remove the IP alias, the 2nd line disappears and the first remains.

            192.168.100.0/24 link#25 U 681 1500 em1_vlan5

            If I add an IP alias for the same subnet to another interface weather it's the same IP or not, the lo for the IP is created, but the original subnet route remains.

            192.168.100.0/24 link#25 U 681 1500 em1_vlan5
            192.168.100.162 link#26 UHS 0 16384 lo0

            The only way to get rid of the following line is to manually remove it or reboot.

            192.168.100.0/24 link#25 U 681 1500 em1_vlan5

            Thanks,

            Rhongomiant

            1 Reply Last reply Reply Quote 0
            • C
              cmb
              last edited by

              Are you always testing in a VLAN scenario? Something else specific to what you're doing that might be atypical?

              I'm not sure what's specific to what you're doing, it cleanly removes the VIP from the old interface including the link route and adds it correctly to the new interface in every scenario I can come up with, including VLANs.

              1 Reply Last reply Reply Quote 0
              • R
                Rhongomiant
                last edited by

                cmb,

                I have a 2 port LAGG trunk with the internal network vlans. I have a single port trunk with the WAN network vlans. I have a GIF IPv6 tunnel.

                Ip my examples the VIP (192.168.100.161    link#25    UHS    0    16384    lo0) is removed, but the route statement like "192.168.100.0/24    link#25    U    681    1500    em1_vlan5" is not removed.

                The test is to have devices connected to different links using the same IP. Setup an alias IP to access the system on one of the links and make sure you can access it. Now delete the alias IP and then create it for the other link. Now try to access that device. Obviously there has to be something unique between the two device to ensure you know to which you are connected.

                Thanks,

                Rhongomiant

                1 Reply Last reply Reply Quote 0
                • First post
                  Last post
                Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.