Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Access to pfsense webui from other vlan

    Scheduled Pinned Locked Moved Routing and Multi WAN
    20 Posts 4 Posters 2.3k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • M
      mandeepmails
      last edited by

      see if this helps…my lab environment any of the virtual machines (subnets) can't do anything

      i tried even checking logs / packet captures, seem like packet replies come back and lost over pfsense as they dont get to know how to go completely till 10.100.64.X

      cisco_L3_switch_output.PNG
      cisco_L3_switch_output.PNG_thumb

      1 Reply Last reply Reply Quote 0
      • johnpozJ
        johnpoz LAYER 8 Global Moderator
        last edited by

        How do you possible to have a 0 ms to hop 3??  Not possible.

        From your client ping pfsense IP on your lan 192.168.1.1 address.

        And your lan rule is only tcp.. So why would you expect icmp to work, or dns for that matter, etc.

        An intelligent man is sometimes forced to be drunk to spend time with his fools
        If you get confused: Listen to the Music Play
        Please don't Chat/PM me for help, unless mod related
        SG-4860 24.11 | Lab VMs 2.8, 24.11

        1 Reply Last reply Reply Quote 0
        • S
          Snailkhan
          last edited by

          @viragomann:

          Of course, it would also work with a static route for the particular subnets. But why want you only route certain IPs out to LAN? Since your WAN is down, the only way out is the LAN gateway, so set it as default gateway. Otherwise pfSense won't get internet access for updates, package installation, DNS, etc.

          The web ui on lan interface is only accessible from other vlan if wan interface is up.

          i want to reach via LAN to those networks that are reachable via lan interface.

          1 Reply Last reply Reply Quote 0
          • johnpozJ
            johnpoz LAYER 8 Global Moderator
            last edited by

            "The web ui on lan interface is only accessible from other vlan if wan interface is up."

            Hand how are you routing to the lan IP on your downstream router?

            An intelligent man is sometimes forced to be drunk to spend time with his fools
            If you get confused: Listen to the Music Play
            Please don't Chat/PM me for help, unless mod related
            SG-4860 24.11 | Lab VMs 2.8, 24.11

            1 Reply Last reply Reply Quote 0
            • M
              mandeepmails
              last edited by

              still no success i tried setting up OPT1 interface for getting online the virtual machine subnets

              i created vlan tags and assigned ip address on Pfsense. i also plugged in a direct ether cable (trunk) from cisco layer3 switch to the Pfsense OPT1 interface. which is configured as trunk on cisco switch with all those vlans allowed.

              when it didn't work i tried disabling firewall (packet filtering) under advanced, hoping it fixes everything….i'm okay to skip firewall function as my main concern is to have pfsense as a router in first place and get everything working in this topology.

              i'm willing to get 192.168.1.X to reach 10.100.64.X and other LAN subnets
              ANd, yes all these LAN subnets to access the WAN Internet BAU

              home.png
              home.png_thumb

              1 Reply Last reply Reply Quote 0
              • johnpozJ
                johnpoz LAYER 8 Global Moderator
                last edited by

                Can your PC ping the IP of pfsense lan?  Do a trace route.. Your pc should hit 10.100.64.1 and then 192.168.1.1

                If you can not ping pfsense lan - then no your never going to get to the internet… Its simple outbound nat that is set when you create the route..

                Post up your lan rules on pfsense, and you outbound nat rule and your routes... And your traceroute from you client pc..

                Why are you creating tags now??  Makes ZERO sense to do that...

                An intelligent man is sometimes forced to be drunk to spend time with his fools
                If you get confused: Listen to the Music Play
                Please don't Chat/PM me for help, unless mod related
                SG-4860 24.11 | Lab VMs 2.8, 24.11

                1 Reply Last reply Reply Quote 0
                • S
                  Snailkhan
                  last edited by

                  @johnpoz:

                  Can your PC ping the IP of pfsense lan?  Do a trace route.. Your pc should hit 10.100.64.1 and then 192.168.1.1

                  If you can not ping pfsense lan - then no your never going to get to the internet… Its simple outbound nat that is set when you create the route..

                  Post up your lan rules on pfsense, and you outbound nat rule and your routes... And your traceroute from you client pc..

                  Why are you creating tags now??  Makes ZERO sense to do that...

                  my thread hijacked :(

                  he is using a l3 switch and that switch doesnt supports nat so where will it throw the traffic.
                  He can create vlan and do intervlan on pfsense simple as that.

                  1 Reply Last reply Reply Quote 0
                  • S
                    Snailkhan
                    last edited by

                    i hope that my problem will be solved if i tell pfsense that to reach the ip subents for vlan 5, and vlan 30 route them via lan interface rather then nating.

                    1 Reply Last reply Reply Quote 0
                    • M
                      mandeepmails
                      last edited by

                      Everyone,

                      i've ripped apart all the configurations from the PFSENSE box and re-installed it. Configured it again as i know this is capable for meeting my requirements. But not able to achieve it.

                      The PC has 3 NICs
                      BGE0 - used for WAN PPPoE i.e., setup and works
                      RL1 - used with my Home Network 192.168.1.X i.e., setup and works
                      RL0 - for the LAB Network 10.100.64.X and 10.100.65.X i.e., Not Working (where i need your help)

                      For the LAB Network to be able to access the Internet and accessible from the outside home
                      I use it with my study partner to access the virtual machine (using Team-viewer or Anydesk etc)

                      Now, what is happening…
                      i have the direct ethernet cable going from the RL0 to the Cisco Switch 3560 Port 18 (which doesn't support NAT)
                      The virtual machines can't access the outside websites
                      And as a matter fact the virtual machines aren't accessible from other 192.168.1.X (home network)

                      I would be really happy to see it work flawlessly and for the same reason i've done all the required configurations on both devices (PFSENSE and Cisco Switch)

                      I understand what it looks like but not happening

                      home.png
                      home.png_thumb

                      1 Reply Last reply Reply Quote 0
                      • M
                        mandeepmails
                        last edited by

                        snailkhan@ i'm opening new fresh post if you feel it's not exactly the same scenario..but i guess similar issue existed for me when i tried accessing webgui for Pfsense using my lab network it didn't work.

                        anyways i hope it works. Thanks for all your help.

                        see you there.

                        1 Reply Last reply Reply Quote 0
                        • First post
                          Last post
                        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.