Hepl with 1wan 2 lan

  • hello i have 2 gateways, the default one goes to internet, and the other goes to a remote network office, the configuration is attached
    the problem is that i cant make my 2 lans to get connected, even from my lan i cant reach the remote lan gateway, and from my pfsense box i cant reach the remote router and the only firewall is this pfsense box,
    for example:
    i got this machine: ip GW
    when i ping the CFG lan interface i got nothing, so the CFGGW too
    i think its becouse the netmask, so i do route add and i can ping the CFG interface
    but when i do:
    PING ( 56(84) bytes of data.
    From icmp_seq=6 Destination Host Unreachable
    thats the result.
    tip: from the lans routers i can reach each other normally
    what i can do to fix this?

  • sorry i miss this info too:
    from my pc with route added
    (traceroute to the local router)
    traceroute to (, 30 hops max, 60 byte packets
    1 (  0.368 ms  0.352 ms  0.342 ms
    2 (  1.050 ms  1.229 ms  1.401 ms

    (traceroute to the remote router)
    traceroute to (, 30 hops max, 60 byte packets
    1 (  0.265 ms  0.230 ms  0.342 ms
    2  * * *
    3  * * *
    4  * * *
    5  * * *
    6  * * *
    7  * * *
    8  * * *
    9  * * *

  • LAYER 8 Netgate

    Figure out your subnetting. is also in

  • yes it is
    and i know that's the problem
    i can split my lan into subnets like,…. i use from 10.10.1 to 10.10.5.
    the thing is to not to do the spliting thing
    i wanna know if this is possible, and how to do it.

  • LAYER 8 Netgate

    You can't have two interfaces on conflicting subnets.  If you want to supernet, say, and ROUTE THAT to another router that takes the networks and subnets it to interfaces like,, etc, you can do that but you can't assign the /16 to an interface.

  • its my lan prefix so if i add interfaces to my pfsense box to cover all the ranges of may lan (lets say with prefix /24 then i can route the remote lan (
    sorry i'm not quite understand u, i have ever do that
    thansk for answering

  • LAYER 8 Netgate

    You cannot do that.  You need to understand basic IP subnetting.  Many, many sources for this information are already out there.

    Get rid of the /16 or, for the other networks, use a prefix other than 10.10.

  • thanks for the tip
    so, if i reduce my /16 to /22 then the 10.10.6… subnet gets out of my lan net so every request to that network will be managed by the gateway, its like that?

  • LAYER 8 Netgate

  • thanx im reading the articles
    as u can see i have changed some rules (marked in yellow)

    now adding a route in my pc i can reach the remote network
    but from inside pfsense i can't (im missing something)
    i'll will lplay with rules in order to reach the remote network from inside pfsense, when i achieve this i'll post it

    and when i end studying the supernetting thing i will change my lan mask and let u know how it works
    thanks 4 all

  • LAYER 8 Netgate

    Your problem is more than just rules, it's interface addresses and subnets.

Log in to reply