Unable to ping to/from netgate XG-7100 WAN interface
-
Setting up a new netgate XG-7100, but I'm unable to ping to/from the WAN interface.
Setup:
- ASUS AC1300 wi-fi router using CIDR block 10.0.0.1/24
- PC A (IP: 10.0.0.107)
- netgate XG-7100 (WAN IP: 10.0.0.20, LAN IP: 172.16.0.1)
- PC B (IP: 172.16.0.12)
Pings from PC A to the XG-7100 WAN interface time out, as do pings from the XG-7100 WAN interface to PC A.
Also, PC B is unable to access the internet, but PC A is able to.I configured the XG-7100 to allow RFC1918 traffic and also added a ICMP rule, but this did not resolve the issue:
What did I do wrong? How can I fix this?
(Note: This is my first pfSense device so please be kind :))
- ASUS AC1300 wi-fi router using CIDR block 10.0.0.1/24
-
Internet access from the pfSense LAN side (your PC B) should work just out of the box.
Post your Interface settings (WAN + LAN) and Firewall Rules (WAN + LAN) here as Screenshots.
Why the F do you run a /8 network? You have plans to run over 16 million hosts flat there?!-Rico
-
Oops, just a typo as I was running out. The ASUS router is using 10.0.0.0/24, not 10.0.0.0/8 :) (Corrected above now.) Sorry for the confusion!
Requested screenshots below.
Interface Settings
Firewall Rules
Other Notes
- XG-7100 ETH1 port is connected to the ASUS router LAN port.
- XG-7100 ETH2 port is connected to PC B.
-
Your WAN subnet mask is wrong.
Change /32 to /24
As upstream gateway put in your ASUS AC1300 IP.-Rico
-
@Rico Corrected the XG-7100 WAN subnet mask and added the upstream gateway. Now the XG-7100 WAN interface is able to ping PC A and the ASUS router, and PC A can ping the XG-7100 WAN interface, but PC B still cannot access the internet.
Details:
-
XG-7100 WAN interface can ping PC-A now:
PING 10.0.0.107 (10.0.0.107) from 10.0.0.20: 56 data bytes 64 bytes from 10.0.0.107: icmp_seq=0 ttl=64 time=0.783 ms 64 bytes from 10.0.0.107: icmp_seq=1 ttl=64 time=0.458 ms 64 bytes from 10.0.0.107: icmp_seq=2 ttl=64 time=0.414 ms --- 10.0.0.107 ping statistics --- 3 packets transmitted, 3 packets received, 0.0% packet loss round-trip min/avg/max/stddev = 0.414/0.552/0.783/0.165 ms
-
Disconnecting the reconnecting PC-B resulted in it being able to access the internet, so all is well now. Thank you for the help, @Rico!
Also, I just found the guide Troubleshooting Network Connectivity, double-checked the settings, and confirmed the tests work.
-
Glad you have it working now.
-Rico