Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    1WAN 2LANS

    Documentation
    3
    8
    9457
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • F
      fossilk
      last edited by

      Hi everyone!

      I am trying to set up to separate LANS to access the same WAN connection.

      all works fine with WAN<->LAN

      I recently added a 3rd NIC to the system and would like to use this to connect a physically separate network to the same WAN. I created some basic firewall rules and re-run the traffic shaper, hoping that would create the proper configuration but no wan or GUI access to pfsense on that network.

      I also renamed OPT1 to LAN2.

      A computer connected using LAN2 will get a DHCP address and correct DNS/GATEWAY settings but will not access anything, not even the pfsense.

      is it possible to do this?  any specific rule I should set on the firewall?

      thank you in advance!!

      1 Reply Last reply Reply Quote 0
      • B
        Bern
        last edited by

        Have you enabled outbound NAT for LAN2?

        1 Reply Last reply Reply Quote 0
        • F
          fossilk
          last edited by

          I am about to right now. thanks for the hint.

          I think what you say is related to:
          http://forum.pfsense.org/index.php/topic,7693.0.html

          thanks!

          1 Reply Last reply Reply Quote 0
          • F
            fossilk
            last edited by

            Just Set NAT to manual and setup the two rules.
            one for LAN1 and one for LAN2

            LAN1 works.
            LAN2 same issue. cant ping or enter GUI

            ipconfig /all  shows all info to be ok.

            any ideas?

            1 Reply Last reply Reply Quote 0
            • GruensFroeschliG
              GruensFroeschli
              last edited by

              You dont need to enable AoN to be able to access the internet from LAN2.
              A simple "allow; source = LAN2_subnet; sourceport = any; destination = any; destinationport = any" rule is sufficent.

              We do what we must, because we can.

              Asking questions the smart way: http://www.catb.org/esr/faqs/smart-questions.html

              1 Reply Last reply Reply Quote 0
              • F
                fossilk
                last edited by

                still no luck… attached are my rules...  at this time.


                1 Reply Last reply Reply Quote 0
                • B
                  Bern
                  last edited by

                  In the very last screenshot, LAN2 is only allowed to use outbound TCP, which is why pings aren't working; change the rule to "any" protocol and try again.

                  1 Reply Last reply Reply Quote 0
                  • F
                    fossilk
                    last edited by

                    thank you for our reply. just came back and it was one of the things I changed.

                    I changed that and disabled/reenabled the traffic shaper.

                    then the internet flow started working. thank you very much for your input.

                    1 Reply Last reply Reply Quote 0
                    • First post
                      Last post