Re: [pfSense Support] Does it matter which interface I specify for static routes?
On Tue, Jun 02, 2009 at 10:32:01PM CEST, Chris Buechler c...@pfsense.org said: On Tue, Jun 2, 2009 at 4:24 PM, Evgeny Yurchenko evgeny.yurche...@frontline.ca wrote: May I ask why pfSense web-interface has this option? It needs to know for NAT rule generation and other purposes. It's a hold over from m0n0wall, it could figure it out without specifying. except when you do failover or load balancing, then you can specify wether the conenctions should be load balanced or use interfaces with priority (failover), depending on the pattern. -- Erwan David, IT Team manager == Trusted Logic Tel: +33 1 30 97 25 03 5 rue du BailliageStd: +33 1 30 97 25 00 78000 Versailles Fax: +33 1 30 97 25 19 France - To unsubscribe, e-mail: support-unsubscr...@pfsense.com For additional commands, e-mail: support-h...@pfsense.com Commercial support available - https://portal.pfsense.org
RE: [pfSense Support] Does it matter which interface I specify for static routes?
Thinking out loud here. But the static routes are only for those subnets which are not directly routable to the interface. I'm assuming your vpn concentrator takes care of that already? I think you'd be better off setting up the LAN3 as a gateway and routing your packets with rules? ( any with dest 10.0.19.0 out gw LAN3) From: Steve Harman [mailto:steve.har...@envisional.com] Sent: Tuesday, June 02, 2009 2:55 AM To: support@pfsense.com Subject: [pfSense Support] Does it matter which interface I specify for static routes? Hi! We have four internal NICs on our pfSense box; LAN , LAN2, LAN3 and LAN4. I need to setup a static route for a remotely hosted network at our parent company's office so any traffic destined for that network is directed towards our site-to-site VPN concentrator / gateway box sitting on LAN3. My question is this; when creating static routes for a remote network, say 10.0.19.0 in System Static Routes I'm asked to specify the Interface from a pulldown menu. If I specify LAN as my Interface does that mean the static route is only in effect for traffic on the LAN interface? (and not LAN2, LAN3 and LAN4). After adding my 10.0.19.0 route I've tried adding additional static routes to 10.0.19.0 and selecting LAN2 but the system tells me A route to this destination network already exists (which of course it does!) Thanks in advance, Steve
Re: [pfSense Support] Does it matter which interface I specify for static routes?
On Tue, Jun 02, 2009 at 08:57:20AM -0700, Tim Dickson wrote: Thinking out loud here... But the static routes are only for those subnets which are not directly routable to the interface. I'm assuming your vpn concentrator takes care of that already? I think you'd be better off setting up the LAN3 as a gateway and routing your packets with rules? ( any with dest 10.0.19.0 out gw LAN3) Please do not top post. Please use proper citing to indicate who wrote what. From: Steve Harman [mailto:steve.har...@envisional.com] Sent: Tuesday, June 02, 2009 2:55 AM To: support@pfsense.com Subject: [pfSense Support] Does it matter which interface I specify for static routes? Hi! We have four internal NICs on our pfSense box; LAN , LAN2, LAN3 and LAN4. I need to setup a static route for a remotely hosted network at our parent company's office so any traffic destined for that network is directed towards our site-to-site VPN concentrator / gateway box sitting on LAN3. My question is this; when creating static routes for a remote network, say 10.0.19.0 in System Static Routes I'm asked to specify the Interface from a pulldown menu. If I specify LAN as my Interface does that mean the static route is only in effect for traffic on the LAN interface? (and not LAN2, LAN3 and LAN4). After adding my 10.0.19.0 route I've tried adding additional static routes to 10.0.19.0 and selecting LAN2 but the system tells me A route to this destination network already exists (which of course it does!) Thanks in advance, Steve -- Eugen* Leitl a href=http://leitl.org;leitl/a http://leitl.org __ ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE - To unsubscribe, e-mail: support-unsubscr...@pfsense.com For additional commands, e-mail: support-h...@pfsense.com Commercial support available - https://portal.pfsense.org
Re: [pfSense Support] Does it matter which interface I specify for static routes?
On Tue, Jun 2, 2009 at 5:54 AM, Steve Harman steve.har...@envisional.com wrote: Hi! We have four internal NICs on our pfSense box; “LAN” , “LAN2”, “LAN3” and “LAN4”. I need to setup a static route for a remotely hosted network at our parent company’s office so any traffic destined for that network is directed towards our site-to-site VPN concentrator / gateway box sitting on “LAN3”. My question is this; when creating static routes for a remote network, say 10.0.19.0 in System Static Routes I’m asked to specify the “Interface” from a pulldown menu. If I specify “LAN” as my Interface does that mean the static route is only in effect for traffic on the LAN interface? (and not LAN2, LAN3 and LAN4). No, only use one route, the interface is where that router and subnet are reachable and applies to everything. - To unsubscribe, e-mail: support-unsubscr...@pfsense.com For additional commands, e-mail: support-h...@pfsense.com Commercial support available - https://portal.pfsense.org
RE: [pfSense Support] Does it matter which interface I specify for static routes?
May I ask why pfSense web-interface has this option? I noticed that whatever you choose in Interface dropdown list the static route will be applied correctly (according to what you configured in gateway). Eugene -Original Message- From: cbuech...@gmail.com [mailto:cbuech...@gmail.com] On Behalf Of Chris Buechler Sent: June 2, 2009 2:01 PM To: support@pfsense.com Subject: Re: [pfSense Support] Does it matter which interface I specify for static routes? On Tue, Jun 2, 2009 at 5:54 AM, Steve Harman steve.har...@envisional.com wrote: Hi! We have four internal NICs on our pfSense box; LAN , LAN2, LAN3 and LAN4. I need to setup a static route for a remotely hosted network at our parent company's office so any traffic destined for that network is directed towards our site-to-site VPN concentrator / gateway box sitting on LAN3. My question is this; when creating static routes for a remote network, say 10.0.19.0 in System Static Routes I'm asked to specify the Interface from a pulldown menu. If I specify LAN as my Interface does that mean the static route is only in effect for traffic on the LAN interface? (and not LAN2, LAN3 and LAN4). No, only use one route, the interface is where that router and subnet are reachable and applies to everything. - To unsubscribe, e-mail: support-unsubscr...@pfsense.com For additional commands, e-mail: support-h...@pfsense.com Commercial support available - https://portal.pfsense.org - To unsubscribe, e-mail: support-unsubscr...@pfsense.com For additional commands, e-mail: support-h...@pfsense.com Commercial support available - https://portal.pfsense.org
Re: [pfSense Support] Does it matter which interface I specify for static routes?
On Tue, Jun 2, 2009 at 4:24 PM, Evgeny Yurchenko evgeny.yurche...@frontline.ca wrote: May I ask why pfSense web-interface has this option? It needs to know for NAT rule generation and other purposes. It's a hold over from m0n0wall, it could figure it out without specifying. - To unsubscribe, e-mail: support-unsubscr...@pfsense.com For additional commands, e-mail: support-h...@pfsense.com Commercial support available - https://portal.pfsense.org