Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Simple Bridging - making an interface a LAN switch

    Scheduled Pinned Locked Moved Firewalling
    6 Posts 2 Posters 2.3k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • T
      theHAMMER
      last edited by

      I have what is probably a noob question. I have searched the boards and Googled, but I can't find a definitive answer. Here it is:
      I have an Alix board with three ethernet interfaces. The third interface will be used for a DMZ after I move, for now I want to use it as an additional LAN port. On the third port, OPT1, I have enabled bridging to the LAN interface and I have enabled the filtering bridge option in the system>advanced menu, and I've added all/all rules for OPT1 to the LAN on the OPT1 interface. I also added a rule for all/all to LAN subnet on the LAN interface. The WAN interface is configured to NAT to the LAN.

      Two questions:

      1. I can ping from workstations on the bridged interfaces hanging off of OPT1 to the LAN, but I can't ping from workstations hanging off the LAN to devices hanging off of OPT1. Why is this? Is it because the WAN interface NATs to the LAN?

      2. Do I need to enable the filtering bridge option if I want to allow all traffic between the bridged interfaces?

      ~~~~~~
        (internet)
        ~~~~~~
      |


      |pfsense  |
      –----------
      |LAN   |OPT1 (Bridged to LAN)
      |10.1.1.0   |
      |   |____
      | |
      | |
      ____ Other workstations
          |
          |
        Workstations

      1 Reply Last reply Reply Quote 0
      • F
        flip
        last edited by

        Have you watched the filter when you're running the ping?

        If there is something blocking it, you'll see it.

        Perhaps pasting a screenshot of your rules as well.

        1 Reply Last reply Reply Quote 0
        • T
          theHAMMER
          last edited by

          there's only a couple of rules, I added an ICMP specific rule to the LAN interface when the all/all rule didn't seem to work.

          LANrules.JPG
          LANrules.JPG_thumb

          1 Reply Last reply Reply Quote 0
          • T
            theHAMMER
            last edited by

            and the other ruleset…

            ![LANbridge rules.JPG](/public/imported_attachments/1/LANbridge rules.JPG)
            ![LANbridge rules.JPG_thumb](/public/imported_attachments/1/LANbridge rules.JPG_thumb)

            1 Reply Last reply Reply Quote 0
            • T
              theHAMMER
              last edited by

              and to answer your other question, I have looked in the firewall log online after pinging, and I also monitored the /etc/filter.log via ssh. I did not see any ICMP packets bound for either interface being dropped.

              1 Reply Last reply Reply Quote 0
              • T
                theHAMMER
                last edited by

                Hello, I have now tried to bridge my WLAN to my LAN, and I get the same effect, i.e, I can ping from the bridged interface to devices on the LAN, but I can't ping from the LAN to devices on the WLAN. All other traffic appears to traverse normally. Would someone please comment on this thread? :o

                1 Reply Last reply Reply Quote 0
                • First post
                  Last post
                Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.