Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I'm trying to route from one basic router to a pfsense box. It's basically so that I can have VPN users on both router aswell as VPN tunnels to test which router performs best. I am also trying to segregate the network with VLANS and the existing router doesn't perform this job very well.

At the moment the network looks like this:

Draytek (existing router)
Network is

LAN port connected to WAN port on new router

pfSense (new router)
Network is
WAN port of this router has an IP of

I've set routes up on both routers. On the existing router I have the following: routes to gateway IP address 

On the new router I have the static routes of: routes to gateway IP address

Routing is not working between them, am I doing something obviously wrong. I think it's a case of not seeing the wood for the trees.

Neither router can ping the other at all.

share|improve this question
the Draytek (from what you've described) isn't acting as a router since it is only connected to 1 network ( – August Feb 27 '13 at 14:45
You don't need a route on the pfsense for as the WAN interface is already on that network. Have you enabled ping on the WAN interface? What is the general FW setup. I would expect the WAN to be blocking most traffic by default – Matt Feb 27 '13 at 14:56
up vote 3 down vote accepted

Well for a start why would the pFsense route through the draytek if it is directly connected to ( You need 3 networks, 1 behind each router, and the third in the middle where they will talk.

share|improve this answer
Silly oversight on my side. Thanks! – dannymcc Mar 4 '13 at 11:35
Don't worry, I know by having done these sort of things myself :) – NickW Mar 4 '13 at 11:37

if the pfsense is getting it's IP (1.115) from the Draytek (1.99), and the 10.x.x.x is only a DHCP pool issued from pfsense, you probably won't be able to reroute to 1.115 since it is itself.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.