Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Cannot ping LAN interface

    Scheduled Pinned Locked Moved Firewalling
    8 Posts 3 Posters 789 Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • H
      hindersahtarra
      last edited by hindersahtarra

      Network.jpg

      I cannot ping from DESKTOP(192.168.1.10) to my LAPTOP(192.168.20.10).
      My DESKTOP(192.168.1.10) also cannot ping pfsense LAN ADDRESS(192.168.20.1).
      My desktop can only ping as far as pfsense WAN ADDRESS(192.168.2.1).
      In the other hand my LAPTOP(192.168.20.10) has no trouble ping my DESKTOP(192.168.1.10).
      I already open my firewall to pass all incoming traffic both on WAN and on LAN.
      pfSense ver2.4.5
      WAN.png

      LAN.png

      Please help and guide me.
      Thank you very much

      JKnottJ 1 Reply Last reply Reply Quote 0
      • JKnottJ
        JKnott @hindersahtarra
        last edited by

        @hindersahtarra

        Why do you have both pfSense and the Linksys router? You're double NATing. You also have the desktop and pfSense on different subnets,

        PfSense running on Qotom mini PC
        i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
        UniFi AC-Lite access point

        I haven't lost my mind. It's around here...somewhere...

        1 Reply Last reply Reply Quote 0
        • H
          hindersahtarra
          last edited by hindersahtarra

          Unfortunately I can't physically get access to both the modem and the router, I only have access to Wi-Fi sginal and one ethernet cabel coming out of the router. Is there any documentation about double NATing? or I need to stay away from double NAT and use bridge mode instead?

          JKnottJ 1 Reply Last reply Reply Quote 0
          • DaddyGoD
            DaddyGo
            last edited by DaddyGo

            there is nothing left, but to go forward ☺

            in turn you drew nicely:

            https://docs.netgate.com/pfsense/en/latest/book/routing/static-routes.html
            https://forum.netgate.com/topic/154139/routing-for-dual-pfsense-routers

            dual-NAT is not good, only the original issue PING will be solved with the above

            edit: if you can't access the original CPE (modem) physically, it will be difficult, but yes bridge-mode is the best you can do to avoid dual-NAT

            edit: (somehow the Linksys should also be removed from the "image" in the case of the bridge)

            Cats bury it so they can't see it!
            (You know what I mean if you have a cat)

            1 Reply Last reply Reply Quote 0
            • H
              hindersahtarra
              last edited by

              Thank you for the advice. I will try my best to avoid dual-NAT, but there is no harm to at least give it a try ☺

              1 Reply Last reply Reply Quote 0
              • JKnottJ
                JKnott @hindersahtarra
                last edited by

                @hindersahtarra

                What is the purpose of pfSense in your network? Do you need additional firewall between the Linksys router and the laptop? Also, does that Linksys actually provide different subnets?

                PfSense running on Qotom mini PC
                i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
                UniFi AC-Lite access point

                I haven't lost my mind. It's around here...somewhere...

                H 1 Reply Last reply Reply Quote 0
                • H
                  hindersahtarra @JKnott
                  last edited by

                  @JKnott
                  Main purpose of the pfSense is to get better control/logging over the traffic between Desktop and Laptop. Considering this old linksys only have some kind of a basic firewall, it would be nice if pfSense can give additional firewall feature.
                  Linksys only provide 1 subnet. The LAN side of the pfSense configured to be different subnet as the linksys.

                  JKnottJ 1 Reply Last reply Reply Quote 0
                  • JKnottJ
                    JKnott @hindersahtarra
                    last edited by

                    @hindersahtarra said in Cannot ping LAN interface:

                    Linksys only provide 1 subnet. The LAN side of the pfSense configured to be different subnet as the linksys.

                    You have the desktop and WAN side of pfSense on different subnets, even though they both appear to be connected to the Linksys.

                    PfSense running on Qotom mini PC
                    i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
                    UniFi AC-Lite access point

                    I haven't lost my mind. It's around here...somewhere...

                    1 Reply Last reply Reply Quote 0
                    • First post
                      Last post
                    Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.