UniFi Gateway Advanced Routing with PfSense

[NachT]

Hey all,

If anyone has experience with custom routing with the Ubiquity gateways, I need your help!

My current internal setup is:

What I'm wanting to achieve is communication from any device on my home network, on VLAN20, to VMs on my remote server. The way I was going to do it is:

- Spin another PfSense Gateway up on the home ESXi server, and assign two vNICs both on VLAN20 (for WAN and LAN)

- Spin another PfSense Gateway up on the remote server, and attach a LAN vNIC from each of the separate networks to this new gateway.

- Create a Site-To-Site VPN between these new gateways allowing communication

- (The part I'm stuck at) Somehow configure the local physical gateway at the home (the USG), to route any traffic going to 10.101.x.x from the local VLAN20 only (10.0.0.x), over to my new PfSense gateway which will sit on LAN 10.0.0.254 for example?


I hope that makes sense!

 

[Caged]

There should be a static routes option in the UniFi controller, I've seen a screenshot with it on but I can't see any documentation about it.

 

[NachT]

Got it thanks buddy.
All sorted now, and connection is working great!

For reference and in case others didn't know, you can't setup (well it doesn't look like you can), a static route for an individual VLAN only. So create the static route, and implement firewall rules to prevent the other VLAN communicating with your gateway on the other VLAN.