Can pfsense route between 3 different connections?



  • Hidy ho all,

    I have a pfsense vm thats routing between my lan, and my virtual network.  and its doing quite well.

    but I want to add a 3rd connection to pfsense, and try to get my desktop traffic to go through pfsense.  I've already figured out the theoretical way to do this, set the interface going to my lan as the wan interface (and let it get a dynamic IP), setup a virtual loopback interface on my desktop (with a dynamic IP), create another bridged connection to that loopback interface (with a dynamic ip), and set my physcial interface on the host os to some random ip address/subnet mask/default gateway.

    Trouble is, I can't seem to find a way to tell pfsense that this new bridged connection is also a lan I want to get through.  The only other option I seem to have for assignments is an optional interface.

    But, when I enter some odd routing info for the host, then I can't seem to get out to the internet through the loop back interface.  Do I have to do anything special to get pfsense to route data from my machine through the virtual loop back interface?



  • is such a thing even possible?



  • If I understand correctly, all you want to do is route traffic between all three network interfaces.  If so, then it's pretty easy.

    I set up an additional rule to route in between my LANs.  The default "any" rule allows traffic to route out of either WAN connection for non-private addresses.

    See enclosed screen shot.  It might help you a bit.

    ![Screen Shot 2015-04-30 at 9.07.43 AM.png](/public/imported_attachments/1/Screen Shot 2015-04-30 at 9.07.43 AM.png)
    ![Screen Shot 2015-04-30 at 9.07.43 AM.png_thumb](/public/imported_attachments/1/Screen Shot 2015-04-30 at 9.07.43 AM.png_thumb)



  • I have also need to route between 172.16.5.0/24 and 172.16.1.0/24 with 172.16.5.2 gateway with out third LAN installed.



  • How does one create that rule?  Heck, where does one create that rule?



  • @mattig89ch:

    Hidy ho all,

    I have a pfsense vm thats routing between my lan, and my virtual network.  and its doing quite well.

    but I want to add a 3rd connection to pfsense, and try to get my desktop traffic to go through pfsense.  I've already figured out the theoretical way to do this, set the interface going to my lan as the wan interface (and let it get a dynamic IP), setup a virtual loopback interface on my desktop (with a dynamic IP), create another bridged connection to that loopback interface (with a dynamic ip), and set my physcial interface on the host os to some random ip address/subnet mask/default gateway.

    Trouble is, I can't seem to find a way to tell pfsense that this new bridged connection is also a lan I want to get through.  The only other option I seem to have for assignments is an optional interface.

    But, when I enter some odd routing info for the host, then I can't seem to get out to the internet through the loop back interface.  Do I have to do anything special to get pfsense to route data from my machine through the virtual loop back interface?

    wtf ?
    you make something simple sound complicated: http://timita.org/wordpress/2011/07/29/protect-your-windows-laptop-with-pfsense-and-virtualbox-part-1-preamble/  is old, but still basically the same



  • @mattig89ch:

    How does one create that rule?  Heck, where does one create that rule?

    I posted a screen shot.  It's a firewall rule.