- In order to setup pfSense selective routing, please set up OpenVPN first on your pfSense following our tutorial.
Note: On the Tunnel Settings, mark the checkbox on Don't pull routes option.
- Once you have finished the tutorial, navigate to Firewall → NAT → Outbound. You will need to readjust Mappings according to the screenshot:
- Navigate to Firewall → Rules → LAN.
- Click to Add new interface. Change the following settings:
Action: Pass
Interface: LAN
Protocol: Any
Source: Single host or alias → device IP address you wish to exclude from VPN tunnel. (You can write a whole subnet, range of IP addresses as well)
Gateway: WAN_DHCP
Once you will save changes, your LAN rules should look similar to:
Note: make sure this newly created rule is placed above any other rules.
- Click to Add new interface. Change the following settings:
- Save and apply changes. You may also need to reset the firewall to apply all changes, which you can do by:
- Navigate Diagnostics → States → Reset States → Check Reset the firewall state table → Reset.
- That is it, you can check our IP check website to see whether your devices are routed through ISP connection and rest of them via VPN tunnel.
How can we help you?
Topics
▼
pfSense 2.4.4 selective Routing
Was this article helpful?
Thanks!