Disable gateway does not have an effect

Started by LetYAShYdGR, September 09, 2023, 01:52:21 PM

Previous topic - Next topic
September 09, 2023, 01:52:21 PM Last Edit: September 09, 2023, 01:59:31 PM by LetYAShYdGR
I have three questions to better understand how the logic works of OPNSense interface coming from PfSense.

I have a PPPOE WAN and the disable button in the System/Gateways/Single does not work, but when I go edit and select disable, it shows Status/Pending... and the internet still works.

Can someone please explain me what Far Gateway is and what kind of situations I do need it?

Also when the gateway is enabled when I go to rules and add change the default gateway to WAN, the internet goes down. Policy routing does not work for single GW. Was working in PfSense. Do not know which one is better.

Thank you.

Did you apply the change after disabling the gateway? Not sure whether disabling the only gateway is expected to instantly remove the default route. You might have to enable default gateway switching in the general settings for this to work.

Far Gateway is required when interface IP address and gateway IP address are not in the same subnet. Can sometimes be required e. g. for point-to-point interfaces.

When using policy-based routing, make sure to allow access to local DNS (see the docs).

Cheers
Maurice
OPNsense virtual machine images
OPNsense aarch64 firmware repository

Commercial support & engineering available. PM for details (en / de).

September 10, 2023, 12:17:44 AM #2 Last Edit: September 10, 2023, 12:25:52 AM by LetYAShYdGR
Yes I did apply, also now enabled the default gateway, and even cleared the states table. Seems like disabling a single gateway network does not have any effect, or something else.

So I need to enable Far Gateway as my gateway IP is not in the same subnet as the IP provided by the internet provider.

Quote from: Maurice on September 09, 2023, 03:01:14 PM
When using policy-based routing, make sure to allow access to local DNS (see the docs).

I tried to replicate the settings in my PfSense... I am using port forwarding to 127.0.0.1 unbound, to be able to use another port for port forwarding in VPN DNS.

As a note to developers, I would have appreciated if the GUI had all default values set shown below a setting input.

Cheers.