Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    OPT1 as second LAN interface?

    Scheduled Pinned Locked Moved NAT
    31 Posts 8 Posters 17.7k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • johnpozJ
      johnpoz LAYER 8 Global Moderator
      last edited by

      yeah what is your lan network, it doesn't overlap with that /23 you have on opt1 does it?

      Also you have /23 on opt1 - what do devices on opt1 network have as their mask /23.. Are they pointing to 192.168.100.6 as gateway?  The pfsense opt1 IP you set.  Can they ping the opt1 IP?

      An intelligent man is sometimes forced to be drunk to spend time with his fools
      If you get confused: Listen to the Music Play
      Please don't Chat/PM me for help, unless mod related
      SG-4860 24.11 | Lab VMs 2.8, 24.11

      1 Reply Last reply Reply Quote 0
      • M
        MarkAmations
        last edited by

        Im going to reset the box and start over, I'll upload the configs in about an hour when I get it back to the point it was at (hopefully)

        1 Reply Last reply Reply Quote 0
        • T
          Tiago
          last edited by

          Hi Mark!

          Did you solve your problem?
          If yes, what did you do?
          I have the same issue here.

          Thanks in advance

          1 Reply Last reply Reply Quote 0
          • johnpozJ
            johnpoz LAYER 8 Global Moderator
            last edited by

            Your issue is you have overlapping networks??  What are the details of your problem?  Are you trying to bridge interfaces like the OP?

            I doubt your having the same issue as this user..  If you are having a problem setting up a OPT1 interface I would suggest you start your own thread and post the details of your setup and what exactly  your trying to do, and what is not working..

            The biggest error I see with users adding opt interfaces is they do not put firewall rules on them, since when they first setup pfsense lan gets a default any any, but when you add an opt the firewall has no rules so everything is blocked.  or when they do add the rules they don't add them correctly.

            So if you post up your config for your lan interface and config of yoru opt1 and firewall rules and what is not working in another thread - would be happy to help you.  But not much can do with a me too type post..

            An intelligent man is sometimes forced to be drunk to spend time with his fools
            If you get confused: Listen to the Music Play
            Please don't Chat/PM me for help, unless mod related
            SG-4860 24.11 | Lab VMs 2.8, 24.11

            1 Reply Last reply Reply Quote 0
            • T
              Tiago
              last edited by

              Hi John,

              Thanks for your reply. I am really newbie in pfsense. I tried something in 2010 and stoped. Now I will try to set up it again!

              Well, for now I don´t want to set up rules for my network. I have nowadays 2 networks in my company.
              One LAN1 (10.0.0.x) and one router conected to one point to that LAN1 and provide another LAN2 network (192.168.1.x).
              I installed pfsense 2.1.5 in a machine with 3 network interface.
              In the first network I connected the WAN link.
              In the other two I am trying to set up 2 independent network.
              The first one (LAN) everything is fine.
              In the second one (OPT1), DHCP is working but I can´t access the internet.

              My configurations screens below (LAN, OPT1 (1), OPT1 (2), OPT1 (3), OPT1 (4)

              Lan_1.PNG
              Lan_1.PNG_thumb
              opt1_1.PNG
              opt1_1.PNG_thumb
              opt1_2.PNG
              opt1_2.PNG_thumb
              opt1_3.PNG
              opt1_3.PNG_thumb
              opt1_4.PNG
              opt1_4.PNG_thumb

              1 Reply Last reply Reply Quote 0
              • D
                doktornotor Banned
                last edited by

                One LAN1 (10.0.0.x) and one router conected to one point to that LAN1 and provide another LAN2 network (192.168.1.x).

                That's NOT what's on the screenshots. Which part of "You cannot have two interfaces on a same subnet" is still unclear?

                1 Reply Last reply Reply Quote 0
                • johnpozJ
                  johnpoz LAYER 8 Global Moderator
                  last edited by

                  Yeah from your screenshot you have same IP on both lan and opt1

                  Also your rules on opt1 are only allowing tcp.. So dns would never work this is by default udp, and uses tcp sometimes if large queries or like a zone xfer.

                  If you don't want to setup any rules - you still have to put in something on opt1 when you create it to allow traffic.  I would just put in a duplicate of what the default rule is, ie any any.  Your rule you show on opt1 would work if you would change it to tcp/udp – but would just change it to any.

                  An intelligent man is sometimes forced to be drunk to spend time with his fools
                  If you get confused: Listen to the Music Play
                  Please don't Chat/PM me for help, unless mod related
                  SG-4860 24.11 | Lab VMs 2.8, 24.11

                  1 Reply Last reply Reply Quote 0
                  • T
                    Tiago
                    last edited by

                    Hi John and docktor.

                    The IP was not equal. The both screenshots refers to the OPT_1 (I only split the screen in 2 pictures)

                    Anyway, John, the other tip that you gave me (change for TCP/UDP) solve the problem now!! :-)

                    Thanks for both

                    Regards

                    1 Reply Last reply Reply Quote 0
                    • johnpozJ
                      johnpoz LAYER 8 Global Moderator
                      last edited by

                      Dude the picture you posted clearly shows opt1 having a 10.0.0.1 address, and your dhcp range for opt1 also shows it having a 10.x address..

                      Not the 192.168.1 you state here "another LAN2 network (192.168.1.x)."

                      opt1.png
                      opt1.png_thumb

                      An intelligent man is sometimes forced to be drunk to spend time with his fools
                      If you get confused: Listen to the Music Play
                      Please don't Chat/PM me for help, unless mod related
                      SG-4860 24.11 | Lab VMs 2.8, 24.11

                      1 Reply Last reply Reply Quote 0
                      • T
                        Tiago
                        last edited by

                        Ok, sorry about that!

                        Thanks for help me

                        Regards

                        1 Reply Last reply Reply Quote 0
                        • First post
                          Last post
                        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.