Cannot access device in LAN2 from LAN, no apparent fw rule in action
-
What are you using for AP.. If some soho router just using as AP many of them do not allow for setting a gateway on their lan interface. So you would need to use some 3rd party firmware on it that allows for that. Or you would have to source nat your traffic so AP thinks traffic is from its local network 10.0.1
-
It's TP-LINK TL-WR702N.
You are probably right with the missing gateway setting. It's really not there. I tried changing the LAN interface static IP address to DHCP assigned hoping that pfSense would give it the gateway IP as well. But that did not help.
I am just wondering how come it used to work since I have that bookmark in my browser… :o
-
I am just wondering how come it used to work since I have that bookmark in my browser… :o
Were you accessing it from the 10.0.1.0/24 network at the time?
-
No, always from my PC with IP 10.0.0.39.
FYI - the screenshots now taken using laptop connected to the AP.
-
A workaround for your issue would be a source-NAT rule translating source IPs of packets destined to the AP to the interface address. You can do this by an outbound rule in pfSense.
-
I studied the documentation about how outbound NAT works but I have troubles with understanding.
The outbound NAT documentation (https://doc.pfsense.org/index.php/Outbound_NAT) says: "Outbound NAT does not control which interface traffic will leave, only how traffic is handled as it exits."
So if I get it right, when connecting the AP I need to have the source address of my packets translated to the pfSense LAN2 interface so the AP can reply to an address inside its subnet. That way it does not need a gateway.
I set it up as you can see in the attached screenshot but still cannot connect with the AP.
-
Your source nat is not enabled.. Its grayed out.
-
I noticed that too but the rule does not seem to be disabled…(?)
-
Well your in automatic mode, not hybrid mode!
-
That was it, thank you. :) I've set it to hybrid and instantly regained the communication with my AP which does not support gateways! It's been a great lesson about using outbound NAT in pfSense.
Thank you all very much for help!
