Dual network help

[bforest]

Hello All,

I have two separate networks attached to my FreeBSD Jail Host.

I do NOT wish to route between the two networks (admin & monitor).

I just want my jails to be on the Monitor network and the Jailhost on the Admin network.

* I can access 192.168.11.8 from outside its subnet.
* I can access any of the jails from hosts on their own subnet but...
* I can NOT access any of the jails from outside their subnet.

(everything was working before I moved em0 from 192.168.15. to 192.168.11.)

What am I doing wrong? How do I setup two separate default routes?

FROM /etc/rc.conf:
# Configuration - network
hostname="JailHost"

defaultrouter="192.168.11.1"
ifconfig_em0="inet 192.168.11.8 netmask 255.255.255.0"
##ifconfig_em1="inet 192.168.15.40 netmask 255.255.255.0"

static_routes="admin monitor"
route_admin=" -iface em0 -net 192.168.11.0/24  192.168.11.1"
route_monitor=" -iface em1 -net 192.168.15.0/24  192.168.15.1"

# Services
sshd_enable="YES"
zfs_enable="YES"

# Set dumpdev to "AUTO" to enable crash dumps, "NO" to disable
dumpdev="AUTO"

# JAIL CONFIGURATION - see: /etc/jail.conf
jail_enable="YES"
ifconfig_em1_alias0="inet 192.168.15.100/32"  #www
ifconfig_em1_alias1="inet 192.168.15.120/32"  #mail
ifconfig_em1_alias2="inet 192.168.15.5/32"    #dns
ifconfig_em1_alias3="inet 192.168.15.7/32"    #ca

[J65nko]

As there are not many FreeBSD user out here, you will have a greater chance of solving your issue, by posting your question in the official FreeBSD forums: forums.freebsd.org

[bforest]

Thanks J65nko,

I found the(an) answer to my issue which worked for me.

http://savagedlight.me/2014/03/07/fr...ocal-networks/

The solution in the link above requires modification to 3 files:

My new rc.conf is:

root@JailHost:~ # cat /etc/rc.conf
# Configuration - network
hostname="JailHost"

defaultrouter="192.168.11.1"
ifconfig_em0="inet 192.168.11.8 netmask 255.255.255.0"

##static_routes="admin monitor"
##See: /boot/loader.conf /etc/rc.local /etc/jail.conf

# Services
sshd_enable="YES"
zfs_enable="YES"

# Set dumpdev to "AUTO" to enable crash dumps, "NO" to disable
dumpdev="AUTO"

# JAIL CONFIGURATION - see: /etc/jail.conf
jail_enable="YES"
ifconfig_em1_alias0="inet 192.168.15.100/32"  #www
ifconfig_em1_alias1="inet 192.168.15.120/32"  #mail
ifconfig_em1_alias2="inet 192.168.15.5/32"    #dns
ifconfig_em1_alias3="inet 192.168.15.7/32"    #ca