Re: [pfSense Support] Does it matter which interface I specify for static routes?

2009-06-03 Thread Erwan David
On Tue, Jun 02, 2009 at 10:32:01PM CEST, Chris Buechler c...@pfsense.org said:
 On Tue, Jun 2, 2009 at 4:24 PM, Evgeny Yurchenko
 evgeny.yurche...@frontline.ca wrote:
  May I ask why pfSense web-interface has this option?
 
 It needs to know for NAT rule generation and other purposes. It's a
 hold over from m0n0wall, it could figure it out without specifying.

except when you do failover or load balancing, then you can specify
wether the conenctions should be load balanced or use interfaces with
priority (failover), depending on the pattern.

-- 
Erwan David, IT Team manager
==
Trusted Logic Tel: +33 1 30 97 25 03
5 rue du BailliageStd: +33 1 30 97 25 00
78000 Versailles  Fax: +33 1 30 97 25 19
France

-
To unsubscribe, e-mail: support-unsubscr...@pfsense.com
For additional commands, e-mail: support-h...@pfsense.com

Commercial support available - https://portal.pfsense.org



RE: [pfSense Support] Does it matter which interface I specify for static routes?

2009-06-02 Thread Tim Dickson
Thinking out loud here.

But the static routes are only for those subnets which are not directly
routable to the interface.  I'm assuming your vpn concentrator takes care of
that already?

I think you'd be better off setting up the LAN3 as a gateway and routing
your packets with rules? ( any with dest 10.0.19.0 out gw LAN3)

 

From: Steve Harman [mailto:steve.har...@envisional.com] 
Sent: Tuesday, June 02, 2009 2:55 AM
To: support@pfsense.com
Subject: [pfSense Support] Does it matter which interface I specify for
static routes?

 

Hi!

 

We have four internal NICs on our pfSense box; LAN , LAN2, LAN3 and
LAN4.  

 

I need to setup a static route for a remotely hosted network at our parent
company's office so any traffic destined for that network is directed
towards our site-to-site VPN concentrator / gateway box sitting on LAN3.

 

My question is this; when creating static routes for a remote network, say
10.0.19.0 in System  Static Routes I'm asked to specify the Interface
from a pulldown menu.  If I specify LAN as my Interface does that mean the
static route is only in effect for traffic on the LAN interface?  (and not
LAN2, LAN3 and LAN4).

 

After adding my 10.0.19.0 route I've tried adding additional static routes
to 10.0.19.0 and selecting LAN2 but the system tells me A route to this
destination network already exists (which of course it does!)

 

Thanks in advance,

 

Steve



Re: [pfSense Support] Does it matter which interface I specify for static routes?

2009-06-02 Thread Eugen Leitl
On Tue, Jun 02, 2009 at 08:57:20AM -0700, Tim Dickson wrote:
 
Thinking out loud here...
 
But the static routes are only for those subnets which are not
directly routable to the interface.  I'm assuming your vpn
concentrator takes care of that already?
 
I think you'd be better off setting up the LAN3 as a gateway and
routing your packets with rules? ( any with dest 10.0.19.0 out gw
LAN3)

Please do not top post. Please use proper citing to indicate who
wrote what.
 
 
From: Steve Harman [mailto:steve.har...@envisional.com]
Sent: Tuesday, June 02, 2009 2:55 AM
To: support@pfsense.com
Subject: [pfSense Support] Does it matter which interface I specify
for static routes?
 
 
Hi!
 
 
We have four internal NICs on our pfSense box; LAN , LAN2, LAN3
and LAN4.
 
 
I need to setup a static route for a remotely hosted network at our
parent company's office so any traffic destined for that network is
directed towards our site-to-site VPN concentrator / gateway box
sitting on LAN3.
 
 
My question is this; when creating static routes for a remote network,
say 10.0.19.0 in System  Static Routes I'm asked to specify the
Interface from a pulldown menu.  If I specify LAN as my Interface
does that mean the static route is only in effect for traffic on the
LAN interface?  (and not LAN2, LAN3 and LAN4).
 
 
After adding my 10.0.19.0 route I've tried adding additional static
routes to 10.0.19.0 and selecting LAN2 but the system tells me A
route to this destination network already exists (which of course it
does!)
 
 
Thanks in advance,
 
 
Steve
-- 
Eugen* Leitl a href=http://leitl.org;leitl/a http://leitl.org
__
ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org
8B29F6BE: 099D 78BA 2FD3 B014 B08A  7779 75B0 2443 8B29 F6BE

-
To unsubscribe, e-mail: support-unsubscr...@pfsense.com
For additional commands, e-mail: support-h...@pfsense.com

Commercial support available - https://portal.pfsense.org



Re: [pfSense Support] Does it matter which interface I specify for static routes?

2009-06-02 Thread Chris Buechler
On Tue, Jun 2, 2009 at 5:54 AM, Steve Harman
steve.har...@envisional.com wrote:
 Hi!



 We have four internal NICs on our pfSense box; “LAN” , “LAN2”, “LAN3” and
 “LAN4”.



 I need to setup a static route for a remotely hosted network at our parent
 company’s office so any traffic destined for that network is directed
 towards our site-to-site VPN concentrator / gateway box sitting on “LAN3”.



 My question is this; when creating static routes for a remote network, say
 10.0.19.0 in System  Static Routes I’m asked to specify the “Interface”
 from a pulldown menu.  If I specify “LAN” as my Interface does that mean the
 static route is only in effect for traffic on the LAN interface?  (and not
 LAN2, LAN3 and LAN4).


No, only use one route, the interface is where that router and subnet
are reachable and applies to everything.

-
To unsubscribe, e-mail: support-unsubscr...@pfsense.com
For additional commands, e-mail: support-h...@pfsense.com

Commercial support available - https://portal.pfsense.org



RE: [pfSense Support] Does it matter which interface I specify for static routes?

2009-06-02 Thread Evgeny Yurchenko
May I ask why pfSense web-interface has this option? I noticed that whatever 
you choose in Interface dropdown list the static route will be applied 
correctly (according to what you configured in gateway).

Eugene

-Original Message-
From: cbuech...@gmail.com [mailto:cbuech...@gmail.com] On Behalf Of Chris 
Buechler
Sent: June 2, 2009 2:01 PM
To: support@pfsense.com
Subject: Re: [pfSense Support] Does it matter which interface I specify for 
static routes?

On Tue, Jun 2, 2009 at 5:54 AM, Steve Harman
steve.har...@envisional.com wrote:
 Hi!



 We have four internal NICs on our pfSense box; LAN , LAN2, LAN3 and
 LAN4.



 I need to setup a static route for a remotely hosted network at our parent
 company's office so any traffic destined for that network is directed
 towards our site-to-site VPN concentrator / gateway box sitting on LAN3.



 My question is this; when creating static routes for a remote network, say
 10.0.19.0 in System  Static Routes I'm asked to specify the Interface
 from a pulldown menu.  If I specify LAN as my Interface does that mean the
 static route is only in effect for traffic on the LAN interface?  (and not
 LAN2, LAN3 and LAN4).


No, only use one route, the interface is where that router and subnet
are reachable and applies to everything.

-
To unsubscribe, e-mail: support-unsubscr...@pfsense.com
For additional commands, e-mail: support-h...@pfsense.com

Commercial support available - https://portal.pfsense.org


-
To unsubscribe, e-mail: support-unsubscr...@pfsense.com
For additional commands, e-mail: support-h...@pfsense.com

Commercial support available - https://portal.pfsense.org



Re: [pfSense Support] Does it matter which interface I specify for static routes?

2009-06-02 Thread Chris Buechler
On Tue, Jun 2, 2009 at 4:24 PM, Evgeny Yurchenko
evgeny.yurche...@frontline.ca wrote:
 May I ask why pfSense web-interface has this option?

It needs to know for NAT rule generation and other purposes. It's a
hold over from m0n0wall, it could figure it out without specifying.

-
To unsubscribe, e-mail: support-unsubscr...@pfsense.com
For additional commands, e-mail: support-h...@pfsense.com

Commercial support available - https://portal.pfsense.org