routing

  1. jschmidt3786

    This might be a routing question, I'm not really sure...

    I'm trying to emulate some functionality from a previous linux-based OpenVPN solution onto a new FreeBSD-based OpenVPN solution with different IP ranges. Old VPN network: 10.0.0.0/8 (there are lots of smaller customer ranges within for isolation) New VPN network: 172.29.0.0/16 (ditto)...
  2. A

    Gateway

    Hi, My freebsd has multiple network interfaces and have one default gateway e.g. 192.168.0.1/24 . I want that the gateway should be 10.0.0.1/24 when any request/traffic arrives on the IP 10.0.0.20/24, I mean it should not consider the default gateway when the traffic comes for IP 10.0.0.20/24 ...
  3. N

    Wireguard, pf, nat and FIBS

    Hello, I know, I put this thread in the [firewall/PF] place too, but I think the problem is the fib part, it's why I add it here. I want to change my firewall (FW) because it's not a freebsd machine. The freebsd machine will become my new firewall. The version is "13.2-RELEASE-p8 FreeBSD...
  4. N

    service netif restart && service routing restart removes default route for gateway received via dhclient

    Hi, I have a FreeBSD server running 14.0. It's primary network interface receives public IP and default route via dhclient. Sometimes after fiddling with static routes in fib 1 and adding these to rc.conf I need to run: service netif restart service routing restart This however removes the...
  5. N

    PF Wireguard, pf, nat and FIBS

    Hello, I want to change my firewall (FW) because it's not a freebsd machine. The freebsd machine will become my new firewall. The version is "13.2-RELEASE-p8 FreeBSD 13.2-RELEASE-p8 GENERIC amd64 I want to create a Wireguard VPN tunnel between my new firewall and the outside, but only for...
  6. aragats

    PF NAT to route Wireguard clients' traffic

    I'm missing something obvious. Why NAT doesn't work in a Wireguard server to route clients' traffic? ext_if="vtnet0" wg_clients="10.40.0.0/24" nat on $ext_if inet from $wg_clients to any -> ($ext_if) The server's Wireguard IP address is 10.40.0.1, the client's - 10.40.0.30. Running tcpdump on...
  7. vukodlak

    Bhyve running with Bastille routing bridge issues

    having an issue... Bhyve runs fine by itself. Bastille runs fine by itself. When I try to run them at the same time Bhyve messes up my routing completely. I think it has something to do with Bhyve creating a 2nd bridge and you can't have 2 bridges at once? or I need to add the bhyve bridge to...
  8. A

    jails IPv4 Routes From Jail's FIB

    UPDATE: I may have actually solved this, by swapping the order so that the jail creates the RFC1918 address on that interface FIRST, and then creates the loopback interface second. Now this confuses me even more, since I cannot route using ipv4 from the host system on that FIB, but it is...
  9. A

    PF NAT/masquerade

    Hi, I am using PF firewall and have a logical interface vlan1010 which has a live IP, I want to write a nat/masquerade rule which says that whatever packet goes out from this interface, it should have source-IP same as the live IP assigned to this logical interface i.e. vlan1010 and when the...
  10. Lucian

    Missing default gateway in multi-fib DHCP env

    tl;dr - Second NIC doesn't get a def router via DHCP breaking multiple routing table setup Hello, I need to setup a VM with 2 NICs on DHCP, we need a separate routing table (fib) per NIC, but I'm not getting the default router for the second one. What I've done so far: In /boot/loader.conf...
  11. yofeker

    13.1 Wireguard client configuration; no internet

    I run FreeBSD 13.1 RELEASE on my RPi 3 Model B+. I want to set up Wireguard client on it, so I have installed wireguard from pkg. To run the client, I use wg-quick up /path/to/config. The command gives out no errors, I can access local hosts, but I cannot access the Internet. I believe this is a...
  12. brodiecyber

    Nebula Overlay network extended access

    Hello everyone So i need some assistance with a configuration ive been doing some reading before i joined the forums and this is what i need. I'm coming from a Linux specifically Debian background and am interested in adding a FreeBSD vm in my stack for some networking services as i already us...
  13. sixpiece

    jails no internet from inside jail

    no internet from inside my jail... would like to assign jail an ipv6 address I added this line to sysctl.conf security.jail.allow_raw_sockets=1 I have some sysctl forwarding IPv6 jail.conf is as follows: hydroshop { host.hostname = "hydroponique.shop"; # Hostname...
  14. subnetspider

    HOWTO: Setting up FreeBSD 13 on a IONOS VPS Server

    Update 2023-12-20 This guide applies only to the VMware based "Virtual Server Cloud" VPS servers, which have been discontinued in mid 2023 and replaced with the "VPS Linux" servers. Due to problems with getting IPv6 to work reliably with the IONOS VPS, I have also updated the IPv6 Networking...
  15. Cath O'Deray

    gif(4) TCP/IPv6 routing after service netif restart

    I use the Hurricane Electric Free IPv6 Tunnel Broker service, most recently configured to work with my wired network at home. gif(4), em(4). Re: <https://forums.freebsd.org/posts/556270> I temporarily used Wi-Fi instead of a wired connection, to compare speeds. Then, wishing to revert to wired...
  16. del

    Solved Router(s) not forwarding packets to default gateway(s)

    I have a FreeBSD router that doesn't seem to be forwarding packets to its default gateway, and I can't see why that might be. Here's a diagram of the network: I would like to get traffic from client -> router1 -> gateway -> internet. client is able to ping router1, and router1 is able to ping...
  17. del

    Solved Building a networking lab with FreeBSD 13 in VirtualBox; virtual LAN unable to ping 8.8.8.8

    I'm trying to build a multi-router setup in VirtualBox using FreeBSD machines as the routers. I have two VMs, router-1 and router-2, which are on the same subnet and are able to ping one another. router-1 has a bridge interface with the host machine and is able to ping the wider internet. It...
  18. I

    jails How to configure routing for jail?

    I'm having some problem setting routing inside a jail. I added to rc.conf (inside jail) and it did not work. I then tried "route add 172.16.0.1" and it responded "route: writing to routing socket: Operation not permitted" I think it is not possible to set routing from inside. So, how do I...
  19. RevennaFox

    Advice for Creating a "Command and Control" Server?

    I have a problem that I think FreeBSD can solve for me. I have routers at various off-site locations that I need to be able to log into via SSH for monitoring, configuration, and maintenance. The problem is that none of the routers have static IP addresses, some of them are behind carrier NAT...
  20. K

    Using VLANS to connect VNET jails to WAN?

    I know I've started a few threads here about odd networking experiments that I am running in VNET jails. Still haven't figured anything out about those when using epair(4) interfaces. So I thought I'd try a different strategy using VLAN interfaces instead. And this time, include a (janky)...
Back
Top