LAN1->WAN1->LAN2->WAN2->internet

gjaltemba

LAN1 is my internal network with access to LAN2 and internet

LAN2 is my DMZ sandwiched between an internal pfsense and external pfsense. LAN2 can access the internet but unable to access LAN1 in the current setup.

One solution may be to add an interface with a LAN2 IP address on the internal pfsense. Use this IP as new gateway in the external pfsense and route LAN1 traffic to it. Will this work or is there a better solution?

jaspras

Better to setup

Lan1…..internal network
Lan2.....DMZ. -----> pfsense ---> wan ---> internet

Route between lan1/lan2 as needed

Your way seems unconventional since you have to break
All boggon firewall rules to be able to access lan1 from lan2
If lan2 is on 192.168. ... Or 10.0.0.. Or 172.16.0...

gjaltemba

Thank you for your advice on my setup (see attached). You are correct that lan2 is on 192.168.2.. My goal is for dmz system to mount a smb share served on system 1.

Your suggested setup would have dmz lan and internal lan both behind one firewall. Yes?

DMZ1.jpg_thumb

jaspras

Yeap different networks and route between them