How to I set up pfsense to allow Modem on wan to ping internal interface
-
I have a modem on the WAN which has an internal interface ip address of 192.168.10.1 even though my WAN gets a public IP address.
Set up is like this:
|Modem|–-------------------|WAN - PFSENSE|
Internal IP: 192.168.10.1 External IP: 24.x.x.x
Want IP Alias: 192.168.10.2I used the alias command, ifconfig vr0 inet 192.168.10.2/24 alias to add an alias to vr0 and I get:
vr0: flags=8843 <up,broadcast,running,simplex,multicast>mtu 1500
inet6 fe80::20e:8eff:fe15:900e%vr0 prefixlen 64 scopeid 0x1
inet 24.x.x.x netmask 0xfffff800 broadcast 255.255.255.255
inet 192.168.100.2 netmask 0xffffff00 broadcast 192.168.100.255
ether 00:0e:8e:15:90:0e
media: Ethernet autoselect (100baseTX <full-duplex>)
status: activeI can telnet into the modem, 192.168.10.1:23 and from the diagnostics prompt, i can't ping back 192.168.10.2
I don't see the packets dropped and using packet capture on pfsense, i'm not able to see icmp requests from the modem side. It may be me...so what am I not doing? I was able to achieve this in linux using ifconfig eth0.0 and some firewall rules to allow communication on the internal network address on the wan.
Any help is appreciated.</full-duplex></up,broadcast,running,simplex,multicast>
-
You have to add a static route or nat for the alias too!
-
Can you detail the changes I require? Sorry, i'm still learning lots of this platform! Thanks!