Messages

Hi,

I have the same challenges to get Multiple WAN and multiple vlan on internal network using PBR to work smooth.

Can you please explain what you did to get this to work using "latest version"?

[Setup]

Hi,

Setup
OpnSense version OPNsense 20.7.8_4-amd64

WAN interface (igb0) is connected to a LTE modem
In addition there are two OpenVPN interfaces where;
- one has a static Public IP assigned
- one has a dynamic IP assigned

Above provides three wan interfaces where the traffic can be routed through using PBR.

Internal network consist of LAN and a few vlans to separate traffic.
LAN -> should be using WAN
vlan10 -> should be using PBR to the OpenVPN with static public IP
vlan20 -> should be using PBR to the OpenVPN with dynamic IP assigned

Problem
Following the manual to setup PBR it's possible to use PBR based on above requirements.
But all access between the different vlans/LAN is not possible even if I open the FW to allow everything to Pass. It's possible from the OpnSense router ping each vlan/LAN but there are no other traffic between them.

Has someone the same setup that can point me to a guide how to make this to work?

Best regards
Mats

Yes! This is now solved by changing the translation target. It was set to "Interface" and not 192.168.3.10().

Many thanks for your help Maurice!

Thanks for you reply Maurice!

The strange thing is that I have created a outbound NAT on WAN interface with source *any and destination the LTE Modem defined as an alias. Still no connection to the web UI of the LTE modem.

../Mats

[Setup]

Setup

                   WLink G510                            opnSense v20.7
Internet ---- LTE Modem in Bridge mode ----- WAN (igb0) 100.x.x.x ------LAN with vlans
                         Internal IP 192.168.3.1               Alias IP 192.168.3.10



Problem description
How do I setup opnSense so I can access the LTE modem using the internal IP 192.168.3.1?
I have assigned a "Alias IP" (192.168.3.10) on the WAN (igb0) interface.

Previsously I was using an Edgerouter Lite and there I just added another IP (192.168.3.10) on the interface eth0 and evertything worked smooth.