Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    No internet access on multiple NIC's

    Scheduled Pinned Locked Moved Problems Installing or Upgrading pfSense Software
    28 Posts 4 Posters 3.9k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • D
      doktornotor Banned
      last edited by

      You will never be able to ping anything with ICMP not allowed…

      1 Reply Last reply Reply Quote 0
      • K
        Koval88
        last edited by

        Internally yes but external hosts/sites I should be able to right? At least I was able to when it was working. Still have no internet access on the bridged LAN. I'll draw a map in few hours of my network once I'll get home.
        Thanks!

        1 Reply Last reply Reply Quote 0
        • D
          doktornotor Banned
          last edited by

          Sigh. Allow ICMP if you want ping to work…

          1 Reply Last reply Reply Quote 0
          • K
            kejianshi
            last edited by

            Wow - Thats twice doctornotor said to be sure to allow ICMP and he was uncharacteristically polite about it….  I'd try allowing ICMP.

            1 Reply Last reply Reply Quote 0
            • K
              Koval88
              last edited by

              I have uploaded my network diagram. Right now all I'm trying to accomplish is to just get internet access working then I'll start planning on the virtual network.
              I still do not have internet access, not sure what I am doing wrong. Interfaces are in up status but no internet access from either one. I've rebooted pfsense multiple times still same issue. Thanks!

              ![Plan A.jpg](/public/imported_attachments/1/Plan A.jpg)
              ![Plan A.jpg_thumb](/public/imported_attachments/1/Plan A.jpg_thumb)
              ![Plan B ESXi Internally.jpg](/public/imported_attachments/1/Plan B ESXi Internally.jpg)
              ![Plan B ESXi Internally.jpg_thumb](/public/imported_attachments/1/Plan B ESXi Internally.jpg_thumb)

              1 Reply Last reply Reply Quote 0
              • DerelictD
                Derelict LAYER 8 Netgate
                last edited by

                Which of those are you currently trying to get working?  How many 10.129.0.1 interfaces are you planning on putting on one network?

                Chattanooga, Tennessee, USA
                A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                Do Not Chat For Help! NO_WAN_EGRESS(TM)

                1 Reply Last reply Reply Quote 0
                • K
                  Koval88
                  last edited by

                  I'm trying to get both working. 192.168.1.1 and 10.129.0.1 network. Hoth have same configurations but no internet access. I do not know what's blocking it.

                  1 Reply Last reply Reply Quote 0
                  • DerelictD
                    Derelict LAYER 8 Netgate
                    last edited by

                    I meant which diagram.  Start piece by piece, one interface and function at a time until you're done.

                    Chattanooga, Tennessee, USA
                    A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                    DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                    Do Not Chat For Help! NO_WAN_EGRESS(TM)

                    1 Reply Last reply Reply Quote 0
                    • K
                      Koval88
                      last edited by

                      Plan A, first pfsense firewall. I'm not worrying about firewall inside the ESXi server yet, moving one at a time.
                      Thanks!

                      1 Reply Last reply Reply Quote 0
                      • DerelictD
                        Derelict LAYER 8 Netgate
                        last edited by

                        Where are you trying to make NAT happen?  pfSense or VM pfSense or both?

                        Chattanooga, Tennessee, USA
                        A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                        DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                        Do Not Chat For Help! NO_WAN_EGRESS(TM)

                        1 Reply Last reply Reply Quote 0
                        • K
                          Koval88
                          last edited by

                          I'm trying to NAT both, but starting with Bridge. 192.168.1.0/24.
                          My configurations of firewall are attached to give more clear idea.

                          LAN1_AP.png
                          LAN1_AP.png_thumb
                          LAN2_ESXI.png
                          LAN2_ESXI.png_thumb
                          Interfaces_WAN_LAN.png
                          Interfaces_WAN_LAN.png_thumb
                          Interface_LAN2.png
                          Interface_LAN2.png_thumb

                          1 Reply Last reply Reply Quote 0
                          • DerelictD
                            Derelict LAYER 8 Netgate
                            last edited by

                            What are the bridge members?  (goddamn bridges, why?)

                            Read this:  Especially the very bottom.

                            https://doc.pfsense.org/index.php/Interface_Bridges

                            Chattanooga, Tennessee, USA
                            A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                            DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                            Do Not Chat For Help! NO_WAN_EGRESS(TM)

                            1 Reply Last reply Reply Quote 0
                            • K
                              Koval88
                              last edited by

                              I weird. I just removed the ESXI from the AP port and placed AP onto 192.168.2.1 network and lost connectivity completely. Getting the 169.x IP address now I am locked out cannot access Web Panel, really strange.

                              1 Reply Last reply Reply Quote 0
                              • D
                                doktornotor Banned
                                last edited by

                                Are you attempting some CARP/HA, or what exactly is the virtualized pfSense supposed to do there, beyond needlessly complicating things and causing general headache and mess?

                                1 Reply Last reply Reply Quote 0
                                • K
                                  Koval88
                                  last edited by

                                  That is my project that I am working on. Its gor my digital forensics lab where ill have workstation lab to which ill be remoting into. Other than that I'm trying to make as complicating as possible where I'll be connecting other routers to the network. Im more of a Cisco IOS never used pfSense before.

                                  I'm just trying to get the pfSense 1 to work and get it online. If someone has a configuration file with multiple NIC's so I could try it out.

                                  Thanks!

                                  1 Reply Last reply Reply Quote 0
                                  • First post
                                    Last post
                                  Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.