I saw this option in my OPNsense gateway configuration, and was hoping someone could shed light on what it is, exactly:

Dynamic gateway policy:  [YES/NO]
This interface does not require an intermediate system to act as a gateway

With this explanation:

If the destination is directly reachable via an interface requiring no intermediary system to act as a gateway, you can select this option which allows dynamic gateways to be created without direct target addresses. Some tunnel types support this.

I found this googling and it is getting me a little closer to understanding: https://kb.fortinet.com/kb/documentLink.do?externalID=FD48900#

Once enabled, dynamic-gateway hides the gateway variable for a dynamic interface, such as a DHCP or PPPoE interface. When the interface connects or disconnects, the corresponding routing entries are updated to reflect the change.

But I still don't quite understand. Would someone be nice enough to explain to me a real-world situation in which this might be used, and the difference between using a dynamic gateway or an intermediary gateway?


enter imaxe description here

I hope picture above shows it really nice, basically once one Gateway node for example GW1 will fail then server nodes will automatically use other dynamic gateways GW2 and GW3. Also dynamic gateways allows servers to load balance the traffic among them so you can avoid overloading one Gateway.

| improve this answer | |
  • Ahh, I see. So in the context of OPNsense, it would be my cable modem's connection to the ISP gateway? – AveryFreeman Nov 12 at 17:54

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.