pfSense 2.4.4 selective Routing

  1. In order to set up pfSense selective routing, please set up OpenVPN first on your pfSense.

    Note: On the Tunnel Settings, mark the checkbox on Don't pull routes option.
     
  2. Once you have finished the tutorial, navigate to Firewall → NAT → Outbound. You will need to readjust Mappings according to the screenshot:

    1 (17).png
     
  3. Navigate to Firewall → Rules → LAN.
     
    1. Click to Add new interface. Change the following settings:

      Action: Pass
      Interface: LAN
      Protocol: Any
      Source: Single host or alias → device IP address you wish to exclude from VPN tunnel. (You can write a whole subnet, range of IP addresses as well)
      Gateway: WAN_DHCP

      2 (19).png
      3 (17).png

      Once you will save changes, your LAN rules should look similar to:

      4.png

      Note: make sure this newly created rule is placed above any other rules.
       
  4. Save and apply changes. You may also need to reset the firewall to apply all changes, which you can do by:
  5. Navigate Diagnostics → States → Reset States → Check Reset the firewall state table → Reset.
  6. That is it, you can visit our IP check website to see whether your devices are routed through ISP connection and rest of them via VPN tunnel.
Was this article helpful?

Still having issues?

  • Live chat

  • Email form

Chat functionality relies on cookies. By starting the chat, you agree to their use. Learn more in our Cookie Policy.