Replacing router using Pfsense and 2 NICs



  • We have a setup like so:

    Modem ->Pfsense WAN (NIC0)–>LAN(NIC1)-->internal switch hardware

    Essentially, I want to pass WAN traffic to a different NIC that handles the LAN routing.  I set this up and I can get traffic out to the world and browse webpages and such, but we have a VPN and it can't get in.  I set up the NAT forwarding rules that we had on our old router as close as I could, but for some reason I just couldn't get anything working.  I'm sure it's something small that I'm missing.



  • If the modem already does NAT you will have a private IP address on WAN. If so, you have to uncheck "Block private networks" in the WAN interface settings to permit incoming connections.

    Also consider that you need to set a firewall rule to allow incoming traffic as well. This may also be done in the NAT rule by the "rule association" option.


Log in to reply