PfSense + VPN Issues

[ENTERPRISE]

Hey guys, 

 

I need some assistance from anyone who has configured a VPN on their PfSense firewall. To cut a long story short, I moved to a new ISP that deploys CGNAT. This makes port forwarding virtually impossible which affects my ability to broadcast Plex outside of my network. 

 

I have since signed up with PureVPN that offers a dedicated IP with Port forwarding. I have everything setup on PfSense and the VPN is connected, so that is all good. The issue I am having is that I want to configure firewall rules on PfSense to direct only my Plex server over the VPN WAN, but the rest of my networked devices over the standard WAN. I have followed various guides and I am 99% of the way there but with my current configuration, either all of my network ends up over the VPN, or none at all. Here is the current configs with respect to LAN Rules and Outbound Rules, I am fairly sure I have the rules in the correct order as well.

 

LAN Rules 

 

 

As the above screenshot I have set a LAN rule for my device "Valak Server Apps" & "Valak Server" which is set to use the VPNWAN Gateway as these are the only devices on my LAN that should be using the VPN.

 

The 3rd rule down as highlighted is the rule that is supposed to dictate that all other devices on my LAN subnet should go over standard WAN.

 

The rules are put in the correct order on the list as the VPN rules for "Valak Server Apps" & "Valak Server" should take first precedence over the 3rd rule down as highlighted.

 

Outbound Rules

 

 

The outbound rules on the "VPNWAN" interface are duplicates of the "WAN" interface rules, other than the VPNWAN rules point to the VPN Gateway. These look to be set correctly and in the correct order, after checking a few different guides on the matter. 

 

..........................................................................................................................................

 

So far as I'm concerned the current configuration on LAN. My Plex server should go out over the VPNWAN, while anything else should go over the WAN and that is the order I have set the rules in. 

 

HOWEVER, note the rule I have highlighted on LAN screenshot. If I disable that rule, everything goes over the VPNWAN, if I enable it, everything goes over the WAN. I was expecting that rule to send all other traffic over WAN while Plex used the VPN WAN, but it is not behaving that way.

 

Not sure what I am missing but hopefully someone can help.

 

Thanks,

E