OPNsense
  • Home
  • Help
  • Search
  • Login
  • Register

  • OPNsense Forum »
  • Archive »
  • 18.1 Legacy Series »
  • static routes through interface not gateway
« previous next »
  • Print
Pages: [1]

Author Topic: static routes through interface not gateway  (Read 3462 times)

dangxian

  • Newbie
  • *
  • Posts: 3
  • Karma: 1
    • View Profile
static routes through interface not gateway
« on: October 22, 2018, 05:22:32 pm »
Hello everybody,

I have a question about static routes

My use case seems to require a route setup through an interface not a gateway.
Currently i had to setup this route using the shell :

route add 169.254.255.253/32 -iface enc0
route add 169.254.255.254/32 -iface enc0

Is there a way to setup this kind of static route using the web interface, it seems that only routes with gateway are possible to define, not routes trhough interface.
If it's not possible, how to define these routes permanently at each reboot and opnsense update and upgrade ?

Regards

OPNsense 18.7.4-amd64
Logged

franco

  • Administrator
  • Hero Member
  • *****
  • Posts: 13624
  • Karma: 1171
    • View Profile
Re: static routes through interface not gateway
« Reply #1 on: October 23, 2018, 06:10:15 pm »
Hi dangxian,

enc0 routing is not supported by the kernel due to the trust model of IPsec itself.

There's only room for phase 2 networks (remote) and manual SPD entries (local) that you want to be able to push through.

There's also if_ipsec in FreeBSD since 11.1 that can help with routing in the way you want it, but it still requires proper phase 2 setup and is not yet implemented in OPNsense.


Cheers,
Franco
Logged

dangxian

  • Newbie
  • *
  • Posts: 3
  • Karma: 1
    • View Profile
Re: static routes through interface not gateway
« Reply #2 on: November 05, 2018, 12:03:29 pm »
Hi Franco,

thank you for this clear and technical reply.

Regards,

Dangxian
Logged

  • Print
Pages: [1]
« previous next »
  • OPNsense Forum »
  • Archive »
  • 18.1 Legacy Series »
  • static routes through interface not gateway
 

OPNsense is an OSS project © Deciso B.V. 2015 - 2023 All rights reserved
  • SMF 2.0.19 | SMF © 2021, Simple Machines
    Privacy Policy
    | XHTML | RSS | WAP2