Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    LAN to WAN NAT

    Scheduled Pinned Locked Moved
    Virtualization
    4
    9
    1.7k
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • B
      BryBry
      last edited by

      Hi folks,

      Fairly new to PFSENSE/Networking in general and was hoping someone could advise here. :)

      Not sure if this is entirely possible, but;

      I am currently setting up a virtual LAN, connected to a PFSense firewall/router with a external IP.
      I am trying to get workstations on the LAN IP's to go through PFSense's public IP for internet access.
      Every time I attempt to set this up, I run into issues, eventually lose my patience and give up, cannot seem to work out how to do this.

      I am currently running a server on Win10Pro with HyperVisor;
      PFSense is connected to both an external virtual switch with the public IP, as well as the internal virtual switch used by the workstations, and configured with the IP 192.168.1.1.
      Workstations are only connected to the internal virtual switch and are only configured on the 192.168.1.x range.
      I want to have all LAN IP's on the range 192.168.1.x to route through the firewall using its external IP address so that I can access the internet from a workstation, showing up as the IP of the firewall.

      If someone could point me in the direction of a guide, or run me through how to configure this, it would be much appreciated.

      Thanks!

      1 Reply Last reply Reply Quote 0
      • GruensFroeschliG
        GruensFroeschli
        last edited by

        The configuration you describe is what pfSense defaults to after the initial setup.

        Did you do any configuration changes after the initial setup?

        We do what we must, because we can.

        Asking questions the smart way: http://www.catb.org/esr/faqs/smart-questions.html

        1 Reply Last reply Reply Quote 0
        • B
          BryBry
          last edited by

          @GruensFroeschli

          I can access the firewall from the workstation, but I cannot access the internet from the workstation.

          For example:
          Firewall: 192.168.1.1 & External IP
          Workstation: 192.168.1.2

          I can login to the workstation, and access the webGUI of the PFSENSE system by going to my browser and searching 192.168.1.1.
          However I cannot go through the firewall, and to the web.
          The PFSENSE external and internal IP both ping.

          I have not made any changes to the firewall since installation. (deleted all the rules I made when previously attempted to set this up)

          Thanks.

          1 Reply Last reply Reply Quote 0
          • GruensFroeschliG
            GruensFroeschli
            last edited by

            Did you set the WAN address statically?
            Did you configure a default gateway?

            We do what we must, because we can.

            Asking questions the smart way: http://www.catb.org/esr/faqs/smart-questions.html

            1 Reply Last reply Reply Quote 0
            • B
              BryBry
              last edited by

              @GruensFroeschli

              Please see the attached images for the workstation and PFSENSE LAN config.

              The PFSENSE external IP is set to static and the gateway is specified.

              Thanks,

              1 Reply Last reply Reply Quote 0
              • B
                BryBry
                last edited by

                I have absolutely no idea how I fixed it, but I started setting up a AD DS & DNS server on the workstation, and it now appears to be able to ping.

                If you would have any idea how this fixed it, Im all ears, otherwise, thanks for the help. :)

                1 Reply Last reply Reply Quote 0
                • johnpozJ
                  johnpoz LAYER 8 Global Moderator
                  last edited by

                  Not sure what you did wrong.. But this what pfsense does out of the box there is almost zero configuration needed.

                  But from you posted client config I can tell why "internet' wouldn't work in that setup - is you have NO dns… So how would the client look up www.google.com for example

                  An intelligent man is sometimes forced to be drunk to spend time with his fools
                  If you get confused: Listen to the Music Play
                  Please don't Chat/PM me for help, unless mod related
                  SG-4860 24.03 | Lab VMs 2.7.2, 24.03

                  1 Reply Last reply Reply Quote 0
                  • B
                    BryBry
                    last edited by

                    I can understand your concern regarding DNS, but it couldn't access any network, and was not able to ping IPs directly.

                    Might just be a case of end user stupidity, and in deleting and re-entering some IP's, I might have fixed the issue.

                    Thanks,

                    1 Reply Last reply Reply Quote 0
                    • V
                      viragomann
                      last edited by

                      Your pfSense has internet access? You can verify this at the dashboard in the Version section. If it is able to search for updates, it has access to the internet.

                      If pfSense has internet access, do your LAN rules also allow access to the clients?

                      1 Reply Last reply Reply Quote 0
                      • First post
                        Last post