Problem Getting To Host

[aaron_brown]

I'm new to pfSense firewalls and having issues hitting a host.

LAN - 192.168.1.0/24 (int add 192.468.1.254)
OPT 1 - 192.168.0.0/24 (int add 192.168.0.254)

I have rules going both direction explicitly allowing and logging traffic (all LAN and OPT 1 IP's, protocols, and ports). I can ping the OPT 1 (.254) address from a host in the LAN (192.168.1.105), but not the host connected to OPT 1. The logs show that the ping was permitted from LAN to OPT 1, but I see no logs for the return traffic on the ping. The host connected to OPT 1 is in the ARP table.

Any help is greatly appreciated.

[chpalmer]

No gateway set for OPT1 right?

[aaron_brown]

Correct.

[chpalmer]

There would be no logging for the OPT1 host answering a ping.

But doing a packet capture on the OPT interface would show the traffic.

On the host machine-

Local address set up right? Gateway? (192.168.0.254) What is the host address?

Firewall on host machine?

[aaron_brown]

I will do a packet capture and see what that says. The gateway is set on the local machine, I'm remote from it now and since I can't get to it, I can't remote to check firewall.

I'll be onsite tomorrow and will double check firewall settings.

Host: 192.168.0.2/24
Gateway: 192.168.0.254
Generic DNS servers

[chpalmer]

If it is a Windows machine it will see anything outside of its own subnet as "public".

Keep that in mind.

Good luck!

[aaron_brown]

Thank you for your input. I will post tomorrow to ensure closure of this issue.

[aaron_brown]

The NIC had 2 addresses and the gateway was set for the secondary address. Utilizing the correct gateway resolved the issue. I appreciate the time you took to respond and assist, that's very kind of you.