How to get 2 separate networks to talk to each other?
-
@kiokoman I have new information to present. I was doing my ping wrong using default as source. I was curious and tried again with LAN and also resulted in packet loss.
🔒 Log in to view🔒 Log in to view
🔒 Log in to viewStatic ARP is not enabled.
-
PING it from the SERVER IP of pfsense - change your source to server!!
-
-
Well sniff on pfsense server interface when you ping - looks like you have just plain connectivity problem..
-
the nas is out of the dhcp range, it must have a static entry, please check if you inadvertently enabled
ARP Table Static Entry Create an ARP Table Static Entry for this MAC & IP Address pair.
if so disable / untick it
or if you have set a wrong gateway (should be empty)
-
look in pfsense arp table - what does it show for this 70.2 IP
-
-
And your sure that is correct? there for your 70.2 address.
Sniff when your pinging from pfsense server interface... Do you see the traffic go out to the correct mac, if so if no answer its on the client or the connection to the client..
If pfsense can not talk to it from its own interface in the network, then its never going to work from a different network.
-
@johnpoz
Yup, I just checked the MAC address, it matches.
How do I sniff while pinging? Where do I find this in pfsense? -
diag menu, packet capture...
-
@ilovechickennuggets
but you did not answer my question, put a screenshot of that static entry pls -
@johnpoz
🔒 Log in to view
🔒 Log in to view
🔒 Log in to viewI just want to let you you I appreciate and thank you for your patience. I am not too good with this area stuff. Here's what I got from the packet capture, hopefully with the right settings.
-
Well there are no pings in there..
So up the level of output so you can see the mac.. I think your mac is wrong to be honest. Since you set a static.
And when you did the sniff you did it at the same time as you were pinging?
Not seeing any response for dns in there either..
-
@kiokoman @johnpoz
🔒 Log in to viewThese are the current static mapping settings of the entry. The first shows pfsense. The second shows the MAC of the nas. So to make sure I was getting the right IP and MAC, I restarted my NAS. Somehow it gave me a new IP from dhcp. I did something wrong.
P.S. kiokoman, thank you for your help too!
-
And can you ping this IP?
-
@johnpoz
Yes the sniff happened at the same time as the ping.After I restarted my NAS just now, it gave me new IP of 192.168.70.10 - which is the start of my DHCP range.
-
and can you ping that?
Can your nas ping pfsense 70.1 address?
-
@johnpoz
🔒 Log in to view
🔒 Log in to viewPacket capture is not picking up anything during the ping
-
Well then no nothing is going to work... Can the server ping pfsense IP? Does internet work? You have it directly plugged into an interface on pfsense - there are no switches.
I am not sure that your doing the sniff correctly to be honest.. do a tcpdump on pfsense while you ping..
Open up 2 ssh windows to pfsense and do it this way... start a tcpdump for icmp on the interface this server network is on..
Then in the other windows ping... Then also ping from the server to 70.1 address while your sniff is running
example
🔒 Log in to viewThis sever is physical right - its not some VM running on something?
Lets try this - install the package arping... Lets try that..
example
🔒 Log in to view -
now i'm curious to see where the hell we are hitting the head