Routing problem wlan 10.0.50.0/24 to lan 192.168.0.0/24

josey

1x LAN nic 192.168.0.1
1x WAN nic DHCP
1x WLAN 10.0.50.1
internet gateway 192.168.0.254
pfsense vr. 1.0.2

wlan dhcp set to 10.0.50.200 - 10.0.50.220 with gw 10.0.50.1

clients connected to wlan can open LAN 192.168.0.1 (pfs lan address) and 10.0.50.1
but cant ping lan 192.168.0.0/24 ???

lan, wlan and wan firewall rules are set to allow all traffic!

network setup is :
wlan client – wlan (10.0.50.1) -- (pfsense) -- lan (192.168.0.1) -- switch - (network 192.168.0.0/24 with x users and another pfs machine as internet router)
cant ping google from lan

but when set ip of WAN to static 192.168.0.2/24 and gw 192.168.0.254 i get ping from google.com, and from wlan only ip of google. (cable not connected to WAN interface)

and if i put wlan ip to 192.168.0.x subnet, everything works, but what is the point then of routing on one subnet :)

any help?

GruensFroeschli

You need to setup a static route for your WLAN-subnet on your pfSense that routes traffic from your LAN to Internet that points the traffic of the clients to your pfSense that acts as AccessPoint.

josey

ok i make
static routes
interface WLAN
destination network 192.168.0.0/24
gateway 192.168.0.1

still no ping.
can you help me with advice please

edit: this static rules killed my pfs, now he is freeazing rihg after boot :(

here we go again
4)restart to factory defaults :)

GruensFroeschli

You need to add the static route on the OTHER pfSense you have.
The pfSense your Clients use to access the internet. They have no clue that there is another subnet accessible throught your AP-pF.

josey

ok thanks ill try…

josey

@GruensFroeschli:

You need to add the static route on the OTHER pfSense you have.
The pfSense your Clients use to access the internet. They have no clue that there is another subnet accessible throught your AP-pF.

tkanks mate it works, i add rule to another pfs machine
interface LAN
to 10.0.50.0/24
gateway 192.168.0.1

i have internet on wlan clients, but, i still cant ping 192.168.0.0/24 except 192.168.0.254 (another pfs machine - internet router) from wlan clients, and cant ping wlan clients (from 192.168.0.0/24 to 10.0.50.0/24)

AP-PFS
LAN 192.168.0.1
WAN 192.168.0.2 - gw 192.168.0.254 (witch is ip of another pfs machine i-internet router)
WLAN 10.0.50.1

internet-PFS
LAN 192.168.0.254
WAN static internet ip with gw

and static routes as i wrote
LAN to 10.0.50.0/24 trough gw 192.168.0.1

it seems that at least one rule is missing for ping between this two networks

advice, please

thanks

GruensFroeschli

You should not have the same subnet on two different interfaces.
Your LAN and WAN on APpf should have different subnets.
Best is if you just leave the WAN disconnected.

Set on the WLAN-firerule on APpf as gateway the LAN interface.

As you have it right now the request goes out on WAN and the response should get back over LAN but your clients wont understand that.

josey

@GruensFroeschli:

You should not have the same subnet on two different interfaces.
Your LAN and WAN on APpf should have different subnets.
Best is if you just leave the WAN disconnected.

Set on the WLAN-firerule on APpf as gateway the LAN interface.

As you have it right now the request goes out on WAN and the response should get back over LAN but your clients wont understand that.

yes i did that - wan is unplugged, i just have to put ip, and ip of gw in wan, beacuse internet didnt worked.
if i put in firewall of WLAN rule that LAN is gw, than wlan clients cant ping anything :( or go to internet :(

but ill try to play little bit with that…
thanks

josey

my mistake,
in pfs-ap firewall rules u have 2 options default and gw of wan, i can not put lan as gw. :(
how to do this ? thanks