Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    NO INTERNET TRAFFIC ON LAN

    Scheduled Pinned Locked Moved General pfSense Questions
    16 Posts 5 Posters 1.2k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • M
      mcury @johnpoz
      last edited by mcury

      @johnpoz said in NO INTERNET TRAFFIC ON LAN:

      @pamela that setup makes no sense.. I highly doubt your Huawei is going to nat your downstream 192.168.55 network.

      There is no need to add that route on that router, and you should let pfsense nat to its wan IP.

      She is behind a double nat, which is not desirable.
      If she disables the NAT in pfsense, she will reach the Huawei router with a source IP of the 192.168.55.0/24 network.
      The Huawei router won't know how to route back the packet, and it will send it through the default route, which is WAN.
      That is why I told her to create a static route, so the Huawei router knows that the 192.168.55.0 is behind the LAN interface.

      dead on arrival, nowhere to be found.

      johnpozJ 1 Reply Last reply Reply Quote 0
      • M
        mcury @Pamela
        last edited by

        @pamela br0 is the WAN interface? Try changing that to the LAN interface of the Huawei router.

        dead on arrival, nowhere to be found.

        1 Reply Last reply Reply Quote 0
        • johnpozJ
          johnpoz LAYER 8 Global Moderator @mcury
          last edited by

          @mcury said in NO INTERNET TRAFFIC ON LAN:

          which is not desirable.

          But works.. triple nat, quadruple nat also works, etc.. I find it highly unlikely that router she has at the edge will do natting of downstream networks..

          I would highly suggest just getting it to work with the double nat, before attempting anything else.. Pfsense should just like any other client connected to that router.. If after that works they want to play with removing the double nat.. Great but out of the box just plugging in pfsense should work, as long as the pfsense lan and wan are not overlapping networks.

          An intelligent man is sometimes forced to be drunk to spend time with his fools
          If you get confused: Listen to the Music Play
          Please don't Chat/PM me for help, unless mod related
          SG-4860 24.11 | Lab VMs 2.8, 24.11

          M 1 Reply Last reply Reply Quote 0
          • M
            mcury @johnpoz
            last edited by

            @johnpoz said in NO INTERNET TRAFFIC ON LAN:

            I find it highly unlikely that router she has at the edge will do natting of downstream networks..

            Hm, I didn't take that in consideration.. Its most likely won't have that option..
            You are right, better to keep the double nat, then in case she needs in the future, work to remove it..

            So Pamela, sorry for giving you that 3rd step instruction, better to remove the static route from Huawei router, and leave the NAT enabled at the pfsense side.. Should work..

            dead on arrival, nowhere to be found.

            1 Reply Last reply Reply Quote 0
            • stephenw10S
              stephenw10 Netgate Administrator
              last edited by

              Yes there appears to be no default gateway set.
              As others have suggested, remove the LAN gateway.
              Set the default v4 gateway to WAN instead of automatic.

              Steve

              P 1 Reply Last reply Reply Quote 1
              • P
                Pamela @stephenw10
                last edited by

                @stephenw10 Thanks a lot for having a deep understanding of my case. I changed the gateway to WAN now it is working fine.

                Ping .JPG

                P 1 Reply Last reply Reply Quote 1
                • P
                  Pamela @Pamela
                  last edited by

                  @pamela said in NO INTERNET TRAFFIC ON LAN:

                  @stephenw10 Thanks a lot for having a deep understanding of my case. I changed the gateway to WAN now it is working fine.

                  Ping .JPG

                  Internet started working but is very slow not able to get actual speed I have made following changes still the speed remains same

                  NETWORKING.JPG firewall log.JPG FIREWALL AND NAT.JPG

                  FIREWALL AND NAT.JPG

                  ? 1 Reply Last reply Reply Quote 0
                  • ?
                    A Former User @Pamela
                    last edited by A Former User

                    @pamela said in NO INTERNET TRAFFIC ON LAN:

                    Internet started working but is very slow not able to get actual speed I have made following changes still the speed remains same

                    172.217.160.227 and 142.250.207.238 IS GOOGLE LLC

                    Could you create a firewall rule on wan (to allow traffic please)

                    johnpozJ stephenw10S 2 Replies Last reply Reply Quote 0
                    • johnpozJ
                      johnpoz LAYER 8 Global Moderator @A Former User
                      last edited by

                      @silence said in NO INTERNET TRAFFIC ON LAN:

                      Could you create a firewall rule on wan (to allow traffic please)

                      What???

                      An intelligent man is sometimes forced to be drunk to spend time with his fools
                      If you get confused: Listen to the Music Play
                      Please don't Chat/PM me for help, unless mod related
                      SG-4860 24.11 | Lab VMs 2.8, 24.11

                      1 Reply Last reply Reply Quote 0
                      • stephenw10S
                        stephenw10 Netgate Administrator @A Former User
                        last edited by

                        @silence said in NO INTERNET TRAFFIC ON LAN:

                        create a firewall rule on wan (to allow traffic please)

                        Um, yeah, don't do that!

                        You don't need rules on WAN to allow traffic to reach Google.

                        What speed are you seeing? What do you expect to see? How are you measuring?

                        Steve

                        1 Reply Last reply Reply Quote 1
                        • First post
                          Last post
                        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.