Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    New to pfsense, cant access web from Lan.

    Scheduled Pinned Locked Moved General pfSense Questions
    19 Posts 4 Posters 1.7k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • S
      SimunF @heper
      last edited by

      @heper
      Hello, I have changed my pfsense lan IP to 172.16.0.1/30 and my router wan to 172.16.0.2/30.
      Is this correct?

      1 Reply Last reply Reply Quote 0
      • S
        SimunF @johnpoz
        last edited by

        @johnpoz
        Hello, I have changed my pfsense lan IP to 172.16.0.1/30 and my router wan to 172.16.0.2/30.
        Is this correct?
        0_1533212428482_Udklip8.PNG
        0_1533212440302_Udklip6.PNG
        0_1533212447788_Udklip7.PNG

        1 Reply Last reply Reply Quote 0
        • johnpozJ
          johnpoz LAYER 8 Global Moderator
          last edited by

          What do you have those rules on your wan? Did you turn off nat on pfsense?
          Your rule to allow ping to wan net is pointless with that any any rule below it
          And when ever would source be lan address into lan net?

          Where are you routes showing how to get to 192.168.1/24 and your gateway setup to it?

          An intelligent man is sometimes forced to be drunk to spend time with his fools
          If you get confused: Listen to the Music Play
          Please don't Chat/PM me for help, unless mod related
          SG-4860 24.11 | Lab VMs 2.8, 24.11

          S 2 Replies Last reply Reply Quote 0
          • S
            SimunF @johnpoz
            last edited by

            @johnpoz
            Hello John, I appreciate your help, I would like you to know that.
            I have deleted wan rules created by me.
            I have now turned off nat on PfSense.
            I think I now understand the ping rule and the any rule :-)
            I dont get line 3, lan into lan?
            I have poked around and cant find the routes/gateway you mention.

            1 Reply Last reply Reply Quote 0
            • S
              SimunF @johnpoz
              last edited by

              @johnpoz
              Is this what you want from me?
              0_1533214391739_Udklip10.PNG
              0_1533214398857_Udklip9.PNG

              1 Reply Last reply Reply Quote 0
              • johnpozJ
                johnpoz LAYER 8 Global Moderator
                last edited by

                @simunf said in New to pfsense, cant access web from Lan.:

                I have now turned off nat on PfSense.

                NO... I didn't tell you to do that - I asked if you had because that would be the only reason for such rules on your wan.

                Rules are evaluated as traffic enters and interface from the network, how would lan address EVER be a source of traffic entering the lan interface?

                Did you create your gateway to your downstream router in
                System / Routing / Gateways

                An intelligent man is sometimes forced to be drunk to spend time with his fools
                If you get confused: Listen to the Music Play
                Please don't Chat/PM me for help, unless mod related
                SG-4860 24.11 | Lab VMs 2.8, 24.11

                S 1 Reply Last reply Reply Quote 0
                • S
                  SimunF @johnpoz
                  last edited by

                  @johnpoz
                  I have found these. I have reenabled auto nat (as it was before)
                  2_1533216107622_Udklip12.PNG 1_1533216107622_Udklip11.PNG 0_1533216107620_Udklip10.PNG
                  Thanks in advance. My workday is over for now.

                  1 Reply Last reply Reply Quote 0
                  • johnpozJ
                    johnpoz LAYER 8 Global Moderator
                    last edited by

                    And you have no gateway setup, so how is pfsense going to know to send traffic for 192.168.1/24 to your cisco? It will just send traffic with that dest out its wan..

                    WTF is the route for 192.168.1.0/32 doing in there?

                    An intelligent man is sometimes forced to be drunk to spend time with his fools
                    If you get confused: Listen to the Music Play
                    Please don't Chat/PM me for help, unless mod related
                    SG-4860 24.11 | Lab VMs 2.8, 24.11

                    S 1 Reply Last reply Reply Quote 0
                    • S
                      SimunF @johnpoz
                      last edited by

                      @johnpoz
                      Good morning from Denmark :-)
                      I have removed the route you mentioned. and created this gateway.0_1533277253861_Udklip13.PNG
                      I'm sorry for the inconvenience.

                      1 Reply Last reply Reply Quote 0
                      • S
                        SimunF
                        last edited by

                        I have now removed the Cisco Router, changed the pfsense lan IP to 192.168.1.254/24.
                        And now I have net on all machines...
                        It is not the setup I wanted, but for now it is the setup that works.

                        1 Reply Last reply Reply Quote 0
                        • johnpozJ
                          johnpoz LAYER 8 Global Moderator
                          last edited by johnpoz

                          So the cisco is 172.16.0.1? Or is that pfsense itself?

                          Where is the route?

                          Seems basic routing is beyond your current skill set - so why you would want to complicate it with a downstream router is beyond me.

                          Cisco 2800 switch VLAN2 192.168.1.253, every used port is in no shutdown mode

                          Also you sway every port? The port connected to pfsense, ie your transit network wold not be the same layer 2 network as your 192.168.1 network..

                          An intelligent man is sometimes forced to be drunk to spend time with his fools
                          If you get confused: Listen to the Music Play
                          Please don't Chat/PM me for help, unless mod related
                          SG-4860 24.11 | Lab VMs 2.8, 24.11

                          1 Reply Last reply Reply Quote 0
                          • First post
                            Last post
                          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.