Navigation

    Netgate Discussion Forum
    • Register
    • Login
    • Search
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search

    Routing OPT1 to WAN/LAN

    General pfSense Questions
    3
    7
    5570
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • T
      TomT last edited by

      Hi

      I'm just testing at the moment and have a virtual machine with 3 interfaces.

      WAN 192.168.18.99
      LAN 192.168.1.1
      OPT1 192.168.2.1

      LAN can ping all LAN devices and access the Internet

      How do I configure OPT1 to have access to LAN and WAN ?

      Once that is working, is it possible to restrict OPT1 as follows
      AccessControlList to allow IP Addresses access to LAN & WAN
      OtherList to allow IP Addresses to WAN Only ?

      Thanks

      1 Reply Last reply Reply Quote 0
      • V
        viragomann last edited by

        Any access has to be allowed by firewall rules. Firewall > Rules > OPT1.
        If there is no rule, there is no access from this inteface.
        On LAN interface pfSense has a default allow any-to-any rule.

        You can add aliases in Firewall > Aliases > IP and use these in the rules for destination or source.

        1 Reply Last reply Reply Quote 0
        • johnpoz
          johnpoz LAYER 8 Global Moderator last edited by

          When you say wan do you mean internet?  Wan net is not internet.. If you want to all internet you would need a any rule, or a ! (not rule) for your networks, etc.

          An intelligent man is sometimes forced to be drunk to spend time with his fools
          If you get confused: Listen to the Music Play
          Please don't Chat/PM me for help, unless mod related
          2440 2.4.5p1 | 2x 3100 2.4.4p3 | 2x 3100 22.01 | 4860 22.01

          1 Reply Last reply Reply Quote 0
          • T
            TomT last edited by

            Thanks I've added a rule to OPT1 to allow specific address to access LAN.

            How do I allow all from OPT1 -> Internet ?

            Thanks

            1 Reply Last reply Reply Quote 0
            • T
              TomT last edited by

              Adding an any -> any rule works, but that then allow any to the LAN as well.

              Where I only want a specific list to the LAN.

              1 Reply Last reply Reply Quote 0
              • T
                TomT last edited by

                I think I may have it working…

                Does this look correct ?

                Allow ANY -> ANY
                Block !WiFiACL from LAN


                1 Reply Last reply Reply Quote 0
                • V
                  viragomann last edited by

                  It's hard to say, since we don't know what's your goal.

                  The first rule blocks any traffic to LAN from anywhere, but WiFiACL. The second rule allows any to anywhere.
                  So all in all everything from any to any is allowed, but nothing from WiFiACL to LAN subnet. If that is what you want it's your solution.

                  1 Reply Last reply Reply Quote 0
                  • First post
                    Last post