Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Routing Between Two VLANs - Potential Issues With Certain Application

    Scheduled Pinned Locked Moved Routing and Multi WAN
    5 Posts 3 Posters 739 Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • E Offline
      ElectroPulse
      last edited by

      Hello, all!

      I am preparing to implement a CMS server with educational resources at the school I am working at currently. I just got word from the company supplying us with the CMS (we don't have it yet), that it for some reason is not able to serve content out to clients on different subnets. I am in the process of attempting to get more information about what is behind this limitation.

      Any ideas come to mind whether this can be remedied with some kind of pfSense routing wizardry? I don't know all the ins-and-outs of routing in pfSense, so decided to come here and ask for advice. I haven't gotten into NAT or virtual IPs, and don't even know if they would apply in this situation (doesn't look like virtual IPs are what I had initially thought, and NAT is a concept I've been having trouble wrapping my head around, nor do I even know if it even has a useful application in this situation). Again, I don't have the server in-hand (won't for another few weeks), so am only able to get things set up in hopes that it will work when it arrives, rather than being able to test it right now.

      Thanks!
      ElectroPulse

      1 Reply Last reply Reply Quote 0
      • P Offline
        phil.davis
        last edited by

        Option 1) Get a system that will serve to clients from wherever!

        Option 2) For example you might have:

        WAN: out to public internet 1.2.3.4
        LAN: 10.111.42.1/24
        OPT1: 10.111.43.1/24

        CMS server on LAN.

        Switch pfSense to hybrid NAT mode (so it will still automatically generate the necessary outbound NAT rules on WAN).
        Add an Outbound NAT rule on LAN to NAT traffic from OPT1 10.111.43.1/24 TO pfSense LAN IP 10.111.42.1

        Now trafic from OPT1 to LAN will look like it comes from 10.111.42.1 when it arrives at the CMS server.

        As the Greek philosopher Isosceles used to say, "There are 3 sides to every triangle."
        If I helped you, then help someone else - buy someone a gift from the INF catalog http://secure.inf.org/gifts/usd/

        1 Reply Last reply Reply Quote 0
        • DerelictD Offline
          Derelict LAYER 8 Netgate
          last edited by

          That won't help if the system relies on broadcasts to work properly.  Amazing how myopic some software developers are.

          Chattanooga, Tennessee, USA
          A comprehensive network diagram is worth 10,000 words and 15 conference calls.
          DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
          Do Not Chat For Help! NO_WAN_EGRESS(TM)

          1 Reply Last reply Reply Quote 0
          • E Offline
            ElectroPulse
            last edited by

            Thank you for the replies!

            Option 1 isn't possible as the school has already signed a contract with the company, and the reason we initially even considered it was that we were offered a grant to get this specific system.

            Anyway, that'll give me somewhere to start with testing when the server arrives.

            1 Reply Last reply Reply Quote 0
            • DerelictD Offline
              Derelict LAYER 8 Netgate
              last edited by

              we were offered a grant to get this specific system.

              Nice gig for them.  I'd like some work like that.

              Chattanooga, Tennessee, USA
              A comprehensive network diagram is worth 10,000 words and 15 conference calls.
              DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
              Do Not Chat For Help! NO_WAN_EGRESS(TM)

              1 Reply Last reply Reply Quote 0
              • First post
                Last post
              Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.