Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Cannot Access Servers behind WAN1 from WAN2 LAN network

    Scheduled Pinned Locked Moved NAT
    6 Posts 3 Posters 1.9k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • M
      mrito
      last edited by

      Hi List,
      I have running Public Servers (WEB,EMail Server) behind my WAN1 and I have another network behind WAN2. My problem is, my users on LAN of WAN2 cannot access my Public Servers on WAN1. What do you think is the issue? Sorry I'm newbie in Pfsense.

      Thanks,
      Malvin

      1 Reply Last reply Reply Quote 0
      • johnpozJ
        johnpoz LAYER 8 Global Moderator
        last edited by

        What are you wanting to happen??  How do you have these wans setup for your different lans.  Are you setting a gateway forcing them out a specific wan?

        So you want say wan2 lan to go all the way out to wan2 internet across the internet and then in wan1 to get to your servers?

        Why do you not just let wan2 lan talk to wan1 lan directly through pfsense using rfc1918 addresses?

        An intelligent man is sometimes forced to be drunk to spend time with his fools
        If you get confused: Listen to the Music Play
        Please don't Chat/PM me for help, unless mod related
        SG-4860 24.11 | Lab VMs 2.8, 24.11

        1 Reply Last reply Reply Quote 0
        • M
          mrito
          last edited by

          Well I just want my Wan2 Network be able to access my Public Servers on WAN1. WAN2 is actually used for WIFI connection only and it does not have an access on WAN1 LAN.

          Can you show me how I'm gonna solve this. Thanks.

          1 Reply Last reply Reply Quote 0
          • M
            muswellhillbilly
            last edited by

            @mrito:

            Well I just want my Wan2 Network be able to access my Public Servers on WAN1. WAN2 is actually used for WIFI connection only and it does not have an access on WAN1 LAN.

            Can you show me how I'm gonna solve this. Thanks.

            If your public servers sit behind WAN1, I'd be inclined to treat the connection between your Wifi and public networks as a LAN-2-DMZ relationship. Set up rules to allow selective services through from your Wifi directly to the Public Servers area and access the servers directly that way rather than routing out and back in again.

            1 Reply Last reply Reply Quote 0
            • johnpozJ
              johnpoz LAYER 8 Global Moderator
              last edited by

              ^ exactly!!!  There is no point to routing out just to come back in.  Clearly you want your wifi to have access, so just setup a rule on your wifi to allow the access you want into your wan1 lan from the IPs on the wifi you want to allow access.

              Post up your wan 1 and 2 lan rules.  I am guessing you have specific gateways on the rules to force them out a specific wan..  Your going to need to create rules to allow the access you want.  if you don't want any wan1 lan to initiate traffic to wan2 lan then you don't need rules there but if you want wan2 lan to start a conversation to wan1 lan then you would need rules above he rule that forces a gateway to allow the connection.

              This also means your not natting between your lans - if you went out you would nat out, and then would just have to nat to get back in. Does not seem efficient to me ;)

              An intelligent man is sometimes forced to be drunk to spend time with his fools
              If you get confused: Listen to the Music Play
              Please don't Chat/PM me for help, unless mod related
              SG-4860 24.11 | Lab VMs 2.8, 24.11

              1 Reply Last reply Reply Quote 0
              • M
                mrito
                last edited by

                See attached screenshots.

                My LAN subnet is 172.16.9.0 - WAN1 Local Network
                My DSL_LAN subnet is 172.16.20.0 - WAN2 Local Network (This is already the LAN for WiFi Users)

                WAN.png
                WAN.png_thumb
                LAN.png
                LAN.png_thumb
                WiFI_LAN.png
                WiFI_LAN.png_thumb

                1 Reply Last reply Reply Quote 0
                • First post
                  Last post
                Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.