Virtual pfsense connection issues
-
I'm setting up a dev network at the moment, essentially a virtualized copy of my production network, and trying to connect the two with a virtual pfsense router.
Currently I have pfsense on a physical machine acting as the gateway for a 192.168.7.x/24 network and that's all working fine. That's my live network. Then I've set up KVM on RHEL9 to hold my dev network which will be 192.168.6.x/25. I've got pfsense running on a VM to connect the two. My LAN side IP for the virtual router is 192.168.6.254/25, and my WAN IP is 192.168.7.250/24
The problem I'm having is that I can ping from the WAN side of the virtual router to the LAN side of the physical router, but I can't ping any other devices on the network (DC, etc). I can ping between all the other devices on the 192.168.7.x network so the problem isn't with them, it's just pfsense that's having troubles.
Anyone got any suggestions for what could be causing this?
-
@sabrielandoj said in Virtual pfsense connection issues:
The problem I'm having is that I can ping from the WAN side of the virtual router to the LAN side of the physical router
When you say "ping from the WAN side of the virtual router" you mean pinging from the virtual router itself? Or from a device within the 192.168.6.x/25 (which is 192.168.6.124/25, I assume)?
-
@viragomann Both, but I've mostly been pinging from the router itself. The ping funtion on the web interface let's you choose where to originate the ping, so I've been going from the WAN interface (192.168.7.250) because being on the same network I figured it was least likely to have issues.
Also the only device I have on the virtual LAN network atm is the KVM machine, which is 192.168.6.140/25.
I'm a student setting up a simulation of a real world senario, so I'm eventually going to have a demilitarized zone, a private network, and a dev network that simulates both. That's why I'm subnetting 192.168.6.x
-
@sabrielandoj
If you ping from the pfSense GUI using the Ping tool with the default source (WAN IP) all devices on the 192.168.7.x network should response.
If they don't, but do if you ping from other machines in this network, there must be something wrong in the network settings on one involved device.If you change the source to LAN it's expected that pings won't work, as long as the devices have no route for 192.168.6.124/25 pointing to pfSense. Responses will be sent to the default gateway.