Hi,
I spent hours in this to get this running under version 2.4.3.
It's still the case that I get some kind of routing-loop at LAN
interface if I want to route between subnets which leads to lost
ping-echo requests or the disability to interconnect between subnets.
Even the ARP-table is showing the proper mappings for virtualPs of LAN
Interface, only the packages got lost.
I cannot imagine the problem anymore whether it resides in the
configuration or it is simply a hardware-issue.
I need help from you guys so I attached the minimalized configuration
backup file and I am thankful for everyone to take a look at it and test
this out.
Password is reset to default 'pfsense' and WAN-gateways and WAN
Interfaces should/could be reconfigured.
cheers
Fabian
Am 31.01.2018 um 09:12 schrieb Fabian Bosch:
Hi,
Yes I cecked the Bypass firewall checkbox.
There it says
"This option only applies if one or more static routes have been
defined. If it is enabled, traffic that enters and leaves through the
same interface will not be checked by the firewall. This may be
desirable in some situations where multiple subnets are connected to
the same interface."
Because of that I set up my static routes for this Interface.
Meanwhile I updated to v2.4.2_1 - have to test it again.
Are there any other ideas of possible differences in automatic routing
between v2.3.x and v.2.4.x since there is also a change of underlying
FreeBSD-Version.
cheers!
Fabian
Am 30.01.2018 um 19:29 schrieb PiBa:
Hi Fabian,
Have you set?:
System/Advanced/Firewall & NAT: "Static route filtering, Bypass
firewall rules for traffic on the same interface"
As for your 'static routes', i'm not sure what purpose they serve..
Routing between subnets known on a pfSense interface is 'automatic'.
Regards,
PiBa-NL
Op 30-1-2018 om 9:57 schreef Fabian Bosch:
Hello,
I cannot switch from Version 2.3.3 to 2.4.1 because of the routing
at the same interface.
I transfered the backup.xml from machine A (2.3.3) to machine B
(2.4.1) and everything worked fine but the routing between Subnets
assigned at LAN-Interface.
There are multiple subnets set up via VirtualIPs and there are
static routes to each of the subnets via the native LAN-Gateway
Adress e.g route 192.168.110.0/24 via GW_LAN(192.168.100.1) and
assigned VirtualIP in this case 192.168.110.1
Since this configuration runs well on 2.3.3 I wanted to ask whether
there are major changes in default handling of traffic at the same
interface. In 2.3.3 you don't need firewall-rules to allow traffic
between subnets at the same interface - did this change in 2.4.1?
Thanks!
Fabian
_______________________________________________
pfSense mailing list
https://lists.pfsense.org/mailman/listinfo/list
Support the project with Gold! https://pfsense.org/gold
_______________________________________________
pfSense mailing list
https://lists.pfsense.org/mailman/listinfo/list
Support the project with Gold! https://pfsense.org/gold
