Feature #15107
openAn option to disable routes
0%
Description
When using Wireguard with FRR (dynamic routing) there needs to be an option to select 'Disable routes'
This will prevent installing routes. Usually you only enable this to do own routing decisions via a local gateway and gateway rules or dynamic routing.
There is a quirky workaround for this which is to put 0.0.0.0 in the allowed IP list.
Updated by Kris Phillips 11 months ago
Mike Moore wrote:
When using Wireguard with FRR (dynamic routing) there needs to be an option to select 'Disable routes'
This will prevent installing routes. Usually you only enable this to do own routing decisions via a local gateway and gateway rules or dynamic routing.There is a quirky workaround for this which is to put 0.0.0.0 in the allowed IP list.
Mike,
Can you please clarify? What "routes" are you referring to. The only routes that should be installed are the wg0 interface routes for the locally attached interface. At least in a S2S scenario, anyway.
Updated by Mike Moore 11 months ago
Hey Kris,
The scenario is using wireguard with FRR , bgp in my case.
As i am getting routes from a remote gateway i should ONLY receive routes from that gateway and the only way to achieve this is to use 0.0.0.0 in the allowed list. Failure to do that, pfsense will not load any of the remote routes in its route table.