Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I've asked a similar question previously but I am just now sure I am understanding what I need to do. My current set-up is as follows:


DC2 is able to connect to DC1 just fine using the private IP Address of Of course this works because DC2 sends all traffic to pfSense as it's gateway and PFSense sends traffic to the local RV082B. There is a route because of the VPN.

The problem that we are experiencing is that the branch firewall has no knowledge of the subnet behind pfSense.

Somehow we need to add a route from the branch firewall so that it knows where to send traffic.

We basically just want to be able to ping, RDP, etc to and DC2 being the recipient (there are actually other nodes besides DC2). Its a challenge now that we have pfSense in the way. Its almost as if we have two firewalls. We don't know what to do because we really installed pfSense just for its captive portal capabilities.

Would configuring our pfSense box/router as a transparent bridge assist with this? I basically want a way to make pfSense disappear on the network so that when our VPN users ping or connect to a specified address, it can let the traffic pass to the correct node.

share|improve this question
up vote 1 down vote accepted

If you're keeping the hosts behind pfSense on then you can't make it a transparent bridge as it has to route to and from that network. You could bridge if LAN and WAN were on the same subnet. The VPN needs the additional route for that subnet via an additional phase 2 (how Linksys refers to that in its GUI I don't recall offhand), you need a static route on RV082(B) for the network, and to disable NAT on pfSense.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.