Thinking out loud here. But the static routes are only for those subnets which are not directly routable to the interface. I'm assuming your vpn concentrator takes care of that already?
I think you'd be better off setting up the LAN3 as a gateway and routing your packets with rules? ( any with dest 10.0.19.0 out gw LAN3) From: Steve Harman [mailto:steve.har...@envisional.com] Sent: Tuesday, June 02, 2009 2:55 AM To: support@pfsense.com Subject: [pfSense Support] Does it matter which interface I specify for static routes? Hi! We have four internal NICs on our pfSense box; "LAN" , "LAN2", "LAN3" and "LAN4". I need to setup a static route for a remotely hosted network at our parent company's office so any traffic destined for that network is directed towards our site-to-site VPN concentrator / gateway box sitting on "LAN3". My question is this; when creating static routes for a remote network, say 10.0.19.0 in System > Static Routes I'm asked to specify the "Interface" from a pulldown menu. If I specify "LAN" as my Interface does that mean the static route is only in effect for traffic on the LAN interface? (and not LAN2, LAN3 and LAN4). After adding my 10.0.19.0 route I've tried adding additional static routes to 10.0.19.0 and selecting "LAN2" but the system tells me "A route to this destination network already exists" (which of course it does!) Thanks in advance, Steve