Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    2 subnets cant ping between them

    Scheduled Pinned Locked Moved Routing and Multi WAN
    6 Posts 2 Posters 2.4k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • T Offline
      thorrr
      last edited by

      I have been at this for hours.. and i can't for the life of me figure out what i am doing wrong.

      So this is my setup

      pfsense box with

      WAN - modem
      LAN - switch, 10.0.0.0/24
      OPT1 - ESXi server, 10.0.1.0/24

      Firewall rules for LAN and OPT1 are  * * * ( ie.. Allow ALL ).

      Internet was not working on OPT1 untill i enabled AON..

      but i still can't ping or connect to the the ESXi machine. I can however ping 10.0.1.0

      1 Reply Last reply Reply Quote 0
      • marcellocM Offline
        marcelloc
        last edited by

        The Allow all rule includes all protocols or just tcp?

        Can you do a tcpdump on opt1 to see if there is any traffic on this interface?

        Treinamentos de Elite: http://sys-squad.com

        Help a community developer! ;D

        1 Reply Last reply Reply Quote 0
        • T Offline
          thorrr
          last edited by

          @marcelloc:

          The Allow all rule includes all protocols or just tcp?

          Can you do a tcpdump on opt1 to see if there is any traffic on this interface?

          Yes all protocols

          This is  what i get when i try to ping the machine
          Pinging 10.0.1.100 with 32 bytes of data:
          Request timed out.
          Request timed out.
          Request timed out.
          Request timed out.

          while running a packet capture on opt1:

          14:40:26.935379 IP 10.0.0.10 > 10.0.1.100: ICMP echo request, id 1, seq 781, length 40
          14:40:31.679149 IP 10.0.0.10 > 10.0.1.100: ICMP echo request, id 1, seq 782, length 40
          14:40:36.679376 IP 10.0.0.10 > 10.0.1.100: ICMP echo request, id 1, seq 783, length 40
          14:40:41.679592 IP 10.0.0.10 > 10.0.1.100: ICMP echo request, id 1, seq 784, length 40

          1 Reply Last reply Reply Quote 0
          • marcellocM Offline
            marcelloc
            last edited by

            Listen for some time on same interface (better on console)to see if you can get some broadcast traffic from any machine no same segment.

            just a tcpdump -ni opt1_interface

            Treinamentos de Elite: http://sys-squad.com

            Help a community developer! ;D

            1 Reply Last reply Reply Quote 0
            • T Offline
              thorrr
              last edited by

              Problem solved. I misunderstood how to assign IP's to the interface. i had input 10.0.1.0/24 however 10.0.1.0 is not a valid ip for that, it should have been 10.0.1.1/24

              Still learning ;)

              1 Reply Last reply Reply Quote 0
              • marcellocM Offline
                marcelloc
                last edited by

                Never mind, it happens.  ;)

                Treinamentos de Elite: http://sys-squad.com

                Help a community developer! ;D

                1 Reply Last reply Reply Quote 0
                • First post
                  Last post
                Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.