access 1 pc on Wan From LAN
-
Hello,
I configured my Pfsense on a virtual machine. This means the server gets a private ip from my router. pfsense does dhcp for all other appliances. I have 2 vlans configured 1 for my server and router and 1 for all the rest. Because i'm working behind my LAN adress i canot acces a pc on my wan side. what rule do i need to add to be able to access 1 pc on my Wan side and only from my current pc (fixed ip on Lan)
Thank you in advance,
TBT -
@the-blue-tiger said in access 1 pc on Wan From LAN:
I configured my Pfsense on a virtual machine. This means the server gets a private ip from my router.
So did I, but mine gets a public IP and all local networks are behind it.
Because i'm working behind my LAN adress i canot acces a pc on my wan side. what rule do i need to add to be able to access 1 pc on my Wan side and only from my current pc (fixed ip on Lan)
By default access to any is allowed on LAN. So there would no additional rules needed for that.
But you might have a routing issue. The PC on WAN will send response packets destined to Lan network to the router, since he is missing a specific route for it.
There are 2 ways to solve:
Either add a static route to the WAN PC for the LAN network and point it to pfSense WAN IP,
or add an outbound NAT rule to pfSense WAN interface to masquerade packets to the WAN PC with the WAN IP. -
@viragomann said in access 1 pc on Wan From LAN:
@the-blue-tiger said in access 1 pc on Wan From LAN:
I configured my Pfsense on a virtual machine. This means the server gets a private ip from my router.
So did I, but mine gets a public IP and all local networks are behind it.
how do i set this up? can my VM be the dhcp for the host? MY isp has the option to bridge my modem by adding MAC to it. Do i need to bridge this to the wan port of my vm?
The VM LAN and WAN is set up both as bridged adapter (with virtualbox).
-
@the-blue-tiger said in access 1 pc on Wan From LAN:
how do i set this up? can my VM be the dhcp for the host?
No, you have to pull your public IP from the ISP.
MY isp has the option to bridge my modem by adding MAC to it.
No idea, what the MAC does here. Not sure, if this is a real bridge.
Or is this rather a sort of "exposed host"?Yes, generally you have to bridge the ISP router if it's capable of this.
How does the router get its IP? DHCP or PPPoE?