Home / server / Questions / 143039
Accepted
lpfavreau
Asked: 2010-05-19 07:54:47 +0800 CST

pfSense gateway rules by IP ranges

  • 772

I have pfSense (1.2.3) with a WAN (gateway 10.10.20.1/24) and an OPT1 (gateway 10.10.21.1/24). I also have a LAN (static 10.10.12.1/24, DHCP 10.10.12.128-199/24).

I want to create rules so that traffic coming from LAN go through WAN if the source IP address is below 10.10.12.128/24 and through OPT1 otherwise.

I would I go and make that happen?

Thanks!

Solution: I'm filtering on two subnets as proposed by cpbills and I've added rules on the LAN interface that filters all source 10.10.12.128/25 and then uses the gateway of OPT1 and for the rest, then it falls back on the default route that forward all traffic to the WAN gateway.

networking gateway pfsense rules

2 Answers

  1. Best Answer

    you could break 10.10.12.0/24 into two subnets, 10.10.12.0/25 and 10.10.12.128/25 and then it would be pretty easy to differentiate in your firewall rules.

    but that would probably only add to your workload, unless your hosts are assigned IPs via DHCP.

    • 1

  2. I don't believe that would be a rule but instead would be a NAT route. You could set a NAT route for anything from the 10.10.12.0/25 network to go out the WAN NIC and anything from the 10.10.12.128/25 network will go out the OPT1 NIC. Check the Firewall/NAT tab.

    • 1