Static routing

[Lobster1976]

Hello, please help me.
My router connected to pfSense in router mode. Yes I can use in AP mode. But I want to install AdguardHome and use for whole home network. I know how to NAT forward DNS from pfSense to Asus router Adguard. But after I want to disable DCHP and NAT on Asus router and always stuck here. As understood should set statis route but always wrong. Can someone by fingers to show me.

Let say pfSense 192.168.20.1
Asus router LAN network 192168.50.0/24
Asus router itself 192.168.20.2

Should be here?

 

[eibgrad]

If the secondary router (ASUS) is in router mode, then by definition NAT is enabled, although I suppose you could disable it, but then you would have to add a route on the *primary* router (pfSense) that tells it the gateway IP (which in this case is 192.168.20.2) to the LAN behind the ASUS (192.168.50.0/24). So the ASUS router is irrelevant, unless I'm just missing it. Also, it makes no sense to disable the DHCP server on the ASUS router since those clients are behind the ASUS WAN and have no other access to a DHCP server (certainly not the pfSense DHCP server). Again, unless I'm just not correctly understanding this config.

 

[Lobster1976]

If the secondary router (ASUS) is in router mode, then by definition NAT is enabled, although I suppose you could disable it, but then you would have to add a route on the *primary* router (pfSense) that tells it the gateway IP (which in this case is 192.168.20.2) to the LAN behind the ASUS (192.168.50.0/24). So the ASUS router is irrelevant, unless I'm just missing it. Also, it makes no sense to disable the DHCP server on the ASUS router since those clients are behind the ASUS WAN and have no other access to a DHCP server (certainly not the pfSense DHCP server). Again, unless I'm just not correctly understanding this config.

So, have to add static route on pfSense with 192.168.50.0/24

 

[eibgrad]

So, have to add static route on pfSense with 192.168.50.0/24

Yes, assuming I've correctly understood your problem. If I have, w/ NAT disabled on the ASUS router, that's the only way the pfSense router knows how to route 192.168.50.0/24 back to the ASUS router (via its WAN ip). When NAT is enabled, you don't have this problem because all traffic from 192.168.50.0/24 is replaced w/ the WAN ip of the ASUS router, which obviously the pfSense router knows how to access (it's on the same private network).