One IP not communicating across connected networks.
-
Hello,
I have a 2 pfsense firewalls isolating a network each. Devices on either side should be able to reach each other freely. This is the case for all but one device.
In the below diagram A and B can reach E and F, but not D. E and F can reach everything. This only just started happening today so I'm wonder if some setting was flipped I didn't know about since I'm not the only person who has access to this firewall. Nothing obvious in the Firewall>NAT or Rules, but maybe I'm missing something.
-
Well does D have firewall? Does D point back to firewall2 as its gateway?
Sniff on firewall2 lan side interface do you see the traffic being sent to D?
What are you using to connect, smb, rdp, ssh? ftp?
-
@johnpoz said in One IP not communicating across connected networks.:
Well does D have firewall?
Firewall on D is disabled
Does D point back to firewall2 as its gateway?
It does.
Sniff on firewall2 lan side interface do you see the traffic being sent to D?
I did a packet capture of a ping from Firewall 2 and this is what was returned:
I did the same on Firewall 1. Looks to be sending, but no response:
What are you using to connect, smb, rdp, ssh? ftp?
D is a printer in this case. Specifically, I am trying to ping it by IP.
-
I see that snmp traffic in your first sniff - coming from your 10.20.21 network to port 161, and see no answer. So the device is not answering.. Not an issue with pfsense.
Also see pings in that first sniff from your 10.20.21 network - and no answer. So again not a pfsense issue. Maybe the device firewall got turned back on..
Or maybe it lost its gateway..
edit: Ah or maybe its mask is wrong? Why are you see arp from it for 10.20.21.1?? It would only arp if it thought that IP was in its network.
See it also arping for IP on 10.10.. Does it thinks mask is /8?
