OPNsense Forum

English Forums => General Discussion => Topic started by: markjose on December 02, 2024, 11:22:16 PM

Title: Outbound WAN routing not working
Post by: markjose on December 02, 2024, 11:22:16 PM
Hello

I have two independent WAN connections, what I would like to do is send one network out on one of the connections and the rest out on the others. Diagram is bellow

Wan ------------ All VLANS
Wan 2 ---------- Video Net only

subnet of the video net 192.168.3.0/24

When I change the outbound NAT from WAN to WAN 2 I can't ping and get no network access, the moment I change it all back it seems to be good.
Looking through the firewall logs it seems like the connections are going out of the WAN ? using the traceroute utility I can't get to 8.8.8.8 from opnsense and if I change the outbound routing all comes good.

The WAN connections are on two ISP's not sharing the same path and are provided by separate providers is there anything else I could try?

I have attached a number of screenshots for reference on the above.

Regards,

Mark
Title: Re: Outbound WAN routing not working
Post by: viragomann on December 02, 2024, 11:37:36 PM
The outbound NAT does only address translation.
To direct traffic out to a non-default gateway you have to add a Policy based routing rule to the Video interface. See: https://docs.opnsense.org/manual/firewall.html#policy-based-routing (https://docs.opnsense.org/manual/firewall.html#policy-based-routing)
Title: Re: Outbound WAN routing not working
Post by: mooh on December 03, 2024, 02:13:50 PM
Disable (set checkmark) in Firewall: Settings: Advanced "Disable force gateway"
Title: Re: Outbound WAN routing not working
Post by: markjose on December 03, 2024, 09:37:44 PM
Thanks struggling to find the policy based routing box in the firewall nevertheless will keep looking
Title: Re: Outbound WAN routing not working
Post by: markjose on December 03, 2024, 09:42:37 PM
Quote from: markjose on December 03, 2024, 09:37:44 PM
Thanks struggling to find the policy based routing box in the firewall nevertheless will keep looking

Thanks this was the answer