Cannot reach host from one subnet
-
Hi Guys!
So I have a 6 ports pfsense device and here is my setup and problem.
Setup:
Port 1: WAN PPPoE - Live IP 1
Port 2: WAN PPPoE - Live IP 2
Port 3: LAN Interface - NON NAT Live IP 3 connected to single host with Live IP 4
Port 4: LAN Interface - NAT DHCP Gateway: Port 1
Port 5: LAN Interface - NAT DHCP Gateway: Port 2
Port 6: LAN Interface - NAT DHCP Gateway: Load Balance/Failover (Port 1 and 2)
My problem is
If I am on Port 4, 5 and 6, I cannot ping host with Live IP 4 but I can ping Live IP 3.From the outside, I can ping the host with Live IP 4 with no problems.
Thanks
-
@floydque Can you ping the IP on Port 3?
-
@bossaops Yes. I can ping the Live IP of port 3.
More details:
If I do a trace route on the Live IP 4, I can see that instead of stopping on the gateway because it's under Port 3, it goes out of the internet and comes back but drops only after Port 3.
-
If your doing policy routing - ie rule that says use gateway X.. Then you need rules above that to allow for traffic to other vlans on your network.
https://docs.netgate.com/pfsense/en/latest/multiwan/policy-route.html#bypassing-policy-routing
-
@johnpoz Worked like a charm. Wasted 8 hours. I was almost there. Thank you, thank you very much!