One of the interfaces setup as an additional isolated LAN not working

[Kajetan321]

Hello, I’m trying to configure one of my spare interfaces as an additional isolated LAN (I’m calling it Carleton). I’m following this tutorial here:

https://docs.netgate.com/pfsense/en/latest/solutions/xg-7100/opt-lan.html

The DHCP seems to works, a test computer gets assigned with an IP address but I’m unable to ping anything on the outside from that computer. I can’t even ping the gateway.

Here’s how I set things up:

Setting up the Carleton Interface
pfSense > Interfaces > LAN3
Description: Carleton
IPv4 Config: Static IPv4
IPv4 Address: 192.168.55.3 /24,

Setting up DHCP
Enable: Enable DHCP server on CARLETON interface
Range 192.168.55.100 to 192.168.55.239

Firewall:

login-to-view

login-to-view

Please help. I have been at this the whole afternoon.

[viragomann]

@Kajetan321
Note that this rule allows TCP only. It doesn't allow pings, which uses ICMP.
Try protocol = any for testing.

[Kajetan321]

@viragomann said in One of the interfaces setup as an additional isolated LAN not working:

@Kajetan321
Note that this rule allows TCP only. It doesn't allow pings, which uses ICMP.
Try protocol = any for testing.

I tried this and still no change.

login-to-view

[viragomann]

@Kajetan321
Now you limited the source to the interface address.
Select "Carleton net" to limit it to the connected subnet.

[Kajetan321]

@viragomann

OK, changes made and I'm now able to ping google. This is great, I still can't ping the gateway though.

login-to-view

[viragomann]

@Kajetan321
What is this source now? An alias?
If so does it include the computer, which you're testing from?

I'd recommend to set all rule options to any for test period.

Are you even able to ping the pfSense interface IP then?

[Kajetan321]

This post is deleted!

[Kajetan321]

@viragomann Thanks you it all works now. I was mistyping the ping address. It's time to go home.