Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Access to pfsense webui from other vlan

    Scheduled Pinned Locked Moved Routing and Multi WAN
    20 Posts 4 Posters 2.2k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • V
      viragomann
      last edited by

      Of course, it would also work with a static route for the particular subnets. But why want you only route certain IPs out to LAN? Since your WAN is down, the only way out is the LAN gateway, so set it as default gateway. Otherwise pfSense won't get internet access for updates, package installation, DNS, etc.

      1 Reply Last reply Reply Quote 0
      • johnpozJ
        johnpoz LAYER 8 Global Moderator
        last edited by

        What is the routing table on your L3?  So you send stuff to the wan to get to the lan IPs?

        Your using your lan as the transit between pfsense and your other vlans?  That reside on the downstream router?

        An intelligent man is sometimes forced to be drunk to spend time with his fools
        If you get confused: Listen to the Music Play
        Please don't Chat/PM me for help, unless mod related
        SG-4860 24.11 | Lab VMs 2.8, 24.11

        1 Reply Last reply Reply Quote 0
        • M
          mandeepmails
          last edited by

          similar issue in my case {attached diagram} using PC1 and PC2 i.e., other subnets my PFSENSE webUI doesn't open

          i've a default route on cisco Layer3 switch for internet access
          but not sure what i'm missing on PFSENSE configurations …....Attaching my routes summary from PFSENSE too

          home.png
          home.png_thumb
          PFSENSE_ROUTES.jpg
          PFSENSE_ROUTES.jpg_thumb

          1 Reply Last reply Reply Quote 0
          • johnpozJ
            johnpoz LAYER 8 Global Moderator
            last edited by

            Well whats your rules on lan your pfsense 192.168.1 network which is now the transit for your downstream networks.  Does your outbound nat nat those downstream networks?  When you created the route for 10.100.64 it would of autocreated the outbound nat for you unless you had changed to manual, etc..  BTW don't see route for 10.100.65

            An intelligent man is sometimes forced to be drunk to spend time with his fools
            If you get confused: Listen to the Music Play
            Please don't Chat/PM me for help, unless mod related
            SG-4860 24.11 | Lab VMs 2.8, 24.11

            1 Reply Last reply Reply Quote 0
            • M
              mandeepmails
              last edited by

              Attached All.

              thanks for looking into it

              i'm still trying to live troubleshoot the same

              PFSENSE_NAT_OUTBOUND.jpg
              PFSENSE_NAT_OUTBOUND.jpg_thumb
              PFSENSE_RULES_FLOATING.jpg
              PFSENSE_RULES_FLOATING.jpg_thumb
              PFSENSE_RULES_LAN.jpg
              PFSENSE_RULES_LAN.jpg_thumb
              PFSENSE_RULES_WAN.jpg
              PFSENSE_RULES_WAN.jpg_thumb
              PFSENSE_ROUTES.jpg
              PFSENSE_ROUTES.jpg_thumb
              home.png
              home.png_thumb

              1 Reply Last reply Reply Quote 0
              • johnpozJ
                johnpoz LAYER 8 Global Moderator
                last edited by

                Well on your lan rules you have only lan net… So how would 10.100.x get out??

                An intelligent man is sometimes forced to be drunk to spend time with his fools
                If you get confused: Listen to the Music Play
                Please don't Chat/PM me for help, unless mod related
                SG-4860 24.11 | Lab VMs 2.8, 24.11

                1 Reply Last reply Reply Quote 0
                • M
                  mandeepmails
                  last edited by

                  added a new rule and sharing the screenshot.

                  can't ping from other subnet still, could you be willing to see my screen using anydesk or skype.

                  i'm trying to achieve this one thing for over a week now.

                  Appreciate your help a lot

                  PFSENSE_RULES_LAN_NEW.jpg
                  PFSENSE_RULES_LAN_NEW.jpg_thumb
                  PFSENSE_RULES_LAN_INDEX.jpg
                  PFSENSE_RULES_LAN_INDEX.jpg_thumb

                  1 Reply Last reply Reply Quote 0
                  • M
                    mandeepmails
                    last edited by

                    see if this helps…my lab environment any of the virtual machines (subnets) can't do anything

                    i tried even checking logs / packet captures, seem like packet replies come back and lost over pfsense as they dont get to know how to go completely till 10.100.64.X

                    cisco_L3_switch_output.PNG
                    cisco_L3_switch_output.PNG_thumb

                    1 Reply Last reply Reply Quote 0
                    • johnpozJ
                      johnpoz LAYER 8 Global Moderator
                      last edited by

                      How do you possible to have a 0 ms to hop 3??  Not possible.

                      From your client ping pfsense IP on your lan 192.168.1.1 address.

                      And your lan rule is only tcp.. So why would you expect icmp to work, or dns for that matter, etc.

                      An intelligent man is sometimes forced to be drunk to spend time with his fools
                      If you get confused: Listen to the Music Play
                      Please don't Chat/PM me for help, unless mod related
                      SG-4860 24.11 | Lab VMs 2.8, 24.11

                      1 Reply Last reply Reply Quote 0
                      • S
                        Snailkhan
                        last edited by

                        @viragomann:

                        Of course, it would also work with a static route for the particular subnets. But why want you only route certain IPs out to LAN? Since your WAN is down, the only way out is the LAN gateway, so set it as default gateway. Otherwise pfSense won't get internet access for updates, package installation, DNS, etc.

                        The web ui on lan interface is only accessible from other vlan if wan interface is up.

                        i want to reach via LAN to those networks that are reachable via lan interface.

                        1 Reply Last reply Reply Quote 0
                        • johnpozJ
                          johnpoz LAYER 8 Global Moderator
                          last edited by

                          "The web ui on lan interface is only accessible from other vlan if wan interface is up."

                          Hand how are you routing to the lan IP on your downstream router?

                          An intelligent man is sometimes forced to be drunk to spend time with his fools
                          If you get confused: Listen to the Music Play
                          Please don't Chat/PM me for help, unless mod related
                          SG-4860 24.11 | Lab VMs 2.8, 24.11

                          1 Reply Last reply Reply Quote 0
                          • M
                            mandeepmails
                            last edited by

                            still no success i tried setting up OPT1 interface for getting online the virtual machine subnets

                            i created vlan tags and assigned ip address on Pfsense. i also plugged in a direct ether cable (trunk) from cisco layer3 switch to the Pfsense OPT1 interface. which is configured as trunk on cisco switch with all those vlans allowed.

                            when it didn't work i tried disabling firewall (packet filtering) under advanced, hoping it fixes everything….i'm okay to skip firewall function as my main concern is to have pfsense as a router in first place and get everything working in this topology.

                            i'm willing to get 192.168.1.X to reach 10.100.64.X and other LAN subnets
                            ANd, yes all these LAN subnets to access the WAN Internet BAU

                            home.png
                            home.png_thumb

                            1 Reply Last reply Reply Quote 0
                            • johnpozJ
                              johnpoz LAYER 8 Global Moderator
                              last edited by

                              Can your PC ping the IP of pfsense lan?  Do a trace route.. Your pc should hit 10.100.64.1 and then 192.168.1.1

                              If you can not ping pfsense lan - then no your never going to get to the internet… Its simple outbound nat that is set when you create the route..

                              Post up your lan rules on pfsense, and you outbound nat rule and your routes... And your traceroute from you client pc..

                              Why are you creating tags now??  Makes ZERO sense to do that...

                              An intelligent man is sometimes forced to be drunk to spend time with his fools
                              If you get confused: Listen to the Music Play
                              Please don't Chat/PM me for help, unless mod related
                              SG-4860 24.11 | Lab VMs 2.8, 24.11

                              1 Reply Last reply Reply Quote 0
                              • S
                                Snailkhan
                                last edited by

                                @johnpoz:

                                Can your PC ping the IP of pfsense lan?  Do a trace route.. Your pc should hit 10.100.64.1 and then 192.168.1.1

                                If you can not ping pfsense lan - then no your never going to get to the internet… Its simple outbound nat that is set when you create the route..

                                Post up your lan rules on pfsense, and you outbound nat rule and your routes... And your traceroute from you client pc..

                                Why are you creating tags now??  Makes ZERO sense to do that...

                                my thread hijacked :(

                                he is using a l3 switch and that switch doesnt supports nat so where will it throw the traffic.
                                He can create vlan and do intervlan on pfsense simple as that.

                                1 Reply Last reply Reply Quote 0
                                • S
                                  Snailkhan
                                  last edited by

                                  i hope that my problem will be solved if i tell pfsense that to reach the ip subents for vlan 5, and vlan 30 route them via lan interface rather then nating.

                                  1 Reply Last reply Reply Quote 0
                                  • M
                                    mandeepmails
                                    last edited by

                                    Everyone,

                                    i've ripped apart all the configurations from the PFSENSE box and re-installed it. Configured it again as i know this is capable for meeting my requirements. But not able to achieve it.

                                    The PC has 3 NICs
                                    BGE0 - used for WAN PPPoE i.e., setup and works
                                    RL1 - used with my Home Network 192.168.1.X i.e., setup and works
                                    RL0 - for the LAB Network 10.100.64.X and 10.100.65.X i.e., Not Working (where i need your help)

                                    For the LAB Network to be able to access the Internet and accessible from the outside home
                                    I use it with my study partner to access the virtual machine (using Team-viewer or Anydesk etc)

                                    Now, what is happening…
                                    i have the direct ethernet cable going from the RL0 to the Cisco Switch 3560 Port 18 (which doesn't support NAT)
                                    The virtual machines can't access the outside websites
                                    And as a matter fact the virtual machines aren't accessible from other 192.168.1.X (home network)

                                    I would be really happy to see it work flawlessly and for the same reason i've done all the required configurations on both devices (PFSENSE and Cisco Switch)

                                    I understand what it looks like but not happening

                                    home.png
                                    home.png_thumb

                                    1 Reply Last reply Reply Quote 0
                                    • M
                                      mandeepmails
                                      last edited by

                                      snailkhan@ i'm opening new fresh post if you feel it's not exactly the same scenario..but i guess similar issue existed for me when i tried accessing webgui for Pfsense using my lab network it didn't work.

                                      anyways i hope it works. Thanks for all your help.

                                      see you there.

                                      1 Reply Last reply Reply Quote 0
                                      • First post
                                        Last post
                                      Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.