OPNsense Forum

Archive => 23.7 Legacy Series => Topic started by: ultimz on November 07, 2023, 01:59:31 PM

Title: LAN traffic being sent out to internet
Post by: ultimz on November 07, 2023, 01:59:31 PM
Hi all,

I have a strange issue. I have setup multi-wan with the following

Fibre with public IP on opnsense (ex 197.x.x)
LTE router on private IP to opnsense (ex 192.168.1.2/24 with LTE router having 192.168.1.1 address)
LAN with private IP (ex 192.168.0.1/24)

The internet interfaces are configured in a failover gateway group with LTE having a lower (more important) priority but listed as tier 2 instead of fibre which is tier 1.

When I try to connect from 192.168.0.x to 192.168.1.1 (to manage the LTE router) it seems the traffic gets sent out of the fibre interface to the internet.

What can I check? I have tried changing various settings but no luck... guessing it can't be a firewall issue?
Title: Re: LAN traffic being sent out to internet
Post by: ultimz on November 07, 2023, 05:40:46 PM
Attached an image of a tracert. Would appreciate any assistance on this - thanks.
Title: Re: LAN traffic being sent out to internet
Post by: thebull on November 07, 2023, 06:59:33 PM
It seems OPNsense doesn't know that there is an interface in 192.168.1.0/24, is the interface enabled and listed onder System -> Routes -> Status?
Title: Re: LAN traffic being sent out to internet
Post by: Patrick M. Hausen on November 07, 2023, 07:12:08 PM
Does your allow rule on LAN explicitly set a gateway? If yes, remove that.
Title: Re: LAN traffic being sent out to internet
Post by: ultimz on November 07, 2023, 08:23:34 PM
Quote from: thebull on November 07, 2023, 06:59:33 PM
It seems OPNsense doesn't know that there is an interface in 192.168.1.0/24, is the interface enabled and listed onder System -> Routes -> Status?

Yes it's enabled and it is listed under route status as well.
Title: Re: LAN traffic being sent out to internet
Post by: ultimz on November 07, 2023, 08:24:37 PM
Quote from: Patrick M. Hausen on November 07, 2023, 07:12:08 PM
Does your allow rule on LAN explicitly set a gateway? If yes, remove that.

This worked! Thanks so much... the gateway group was set there. I changed it to "default" and everything is working now. Appreciate the help