Lan to opt1 trafic



  • HI all

    I ve connected new remote  branch to PFsense opt1 interface ,  I connected the cat6 cable from the router directly to opt1 interface

    opt1 interface ip is            :192.168.124.2 /24
    router ip gateway interface : 192.168.124.1  /24

    lan interface ip : 172.16.50.50/16  and the database server 172.16.220.220 /16

    from the remote site which has ip address 192.168.122.0 /24  , I ve  a database server having the ip : 192.168.122.10

    to be able to connect to the server 172.16.220.220 from the remote branch I ve done VIP nat  172.16.220.220==192.168.124.124 on PFsense firewall
    from my remote branch I can ping the opt1 interface 192.168.124.2
    I cant ping VIP 192.168.124.124
    I can trace route till 192.168.124.124 and tracing keep continuing with stars or without closing the connection by reaching the destination

    I have done static route to reach network 192.168.122.0/24 go through gateway 192.168.124.1

    even though the ready easy creation of rule has detected a connection coming from opt1 interface with the ip 192.168.122.10  going to lan interface heading to 172.16.220.200 via icmp protocol .

    from firewall diagnostics ping command I can ping the followings :
                                                                                                          remote branch gateway 192.168.122.1
                                                                                                        my remote branch's database server ip :192.168.122.10
                                                                                                        opt1 interface 192.168.124.2
                                                                                                          VIP address 192.168.124.124

    its obvious the lan network is not able to reply back to opt1 network
    when I try to trace route branch server 192.168.122.10 from the lan net server 172.16.220.220 no traceroute and its not even detecting the gateway to the network  192.168.122.0

    just giving stars * * *



  • please draw a network diagram with the corresponding subnets.

    why do you wish to nat ?


  • LAYER 8 Global Moderator

    "172.16.220.220 /16"

    Why would you use such a large network?  Do you have some 65k nodes there?



  • @heper:

    please draw a network diagram with the corresponding subnets.

    why do you wish to nat ?
    [/quot

    diagram is attached




  • @johnpoz:

    "172.16.220.220 /16"

    Why would you use such a large network?  Do you have some 65k nodes there?

    yeah there are a lot of connecting people diagram is attached



Log in to reply