Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Pfsense + Windows 2016 (AD DNS DHCP) seeking help

    Scheduled Pinned Locked Moved DHCP and DNS
    5 Posts 2 Posters 491 Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • M
      Minh
      last edited by

      Hi everyone,

      Could you please help as I set up my lab?

      Pfsense Turn off DHCP

      Win16 has 2 nics: Internal + external
      Win16 Configure DNS Forwarders to Pfsense DNS
      Win16 Configure Static route from Internal to External
      Win16 is able to connect to the internet through Pfsense

      Client PC joined successfully the domain (itmonks.local)
      Client PC can ping both nic on Win16
      Client PC canot ping google.com, thus cannot connect to the internet.

      Could you please help. I appreciate very much

      Thanks
      Minh

      1 Reply Last reply Reply Quote 0
      • H
        heper
        last edited by heper

        You'd need NAT rules on pfsense for the subnet your clients get. (I assume you have different subnet on internal vs external)

        You would also need a return route on pfsense, so it knows that win16 is the gateway to the subnet

        1 Reply Last reply Reply Quote 0
        • M
          Minh
          last edited by

          Thanks. helper, Yes I have Win16 (DC DNS DHCP + 2 NICs) attached to Pfsense.

          So if I understood you correctly:
          1- I need to make a NAT rule on Pfsense
          WAN - addres => Win16 External address

          2-I would also need a return route
          Could you please point my to youtube clip that show how I can do it?

          Thanks. Appreciate it
          Minh

          1 Reply Last reply Reply Quote 0
          • H
            heper
            last edited by

            The nat rule should be for the client subnet.

            The route should point to the client subnet with win16 IP as gateway.
            See: https://www.netgate.com/docs/pfsense/routing/static-routes.html

            If you need more specific info, please draw a schematic that includes all involved ips & subnets

            1 Reply Last reply Reply Quote 0
            • M
              Minh
              last edited by Minh

              My network looks almost as in the picture and detailed info as below

              0_1533664861362_MySetup.jpg

              Pfsense:
              WAN Internet
              LAN1 192.168.10.1 = Subnet1 = DHCP DNS = Clients Subnet1
              LAN2 192.168.20.1 = Subnet2 = DHCP DNS = Ext + (Win2016) + Int. => Client Subnet2

              Win2016 (DC DHCP DNS)
              Ext = 192.168.20.200
              Int = 192.168.30.1
              Client Subnet2 = 192.168.30.0/24

              I believe I have to set up NAT but I cannot find Instruction how to do NAT for the entire windows subnet?

              Minh

              1 Reply Last reply Reply Quote 0
              • First post
                Last post
              Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.