How to get 2 separate networks to talk to each other?

ilovechickennuggets · Feb 29, 2020, 6:47 PM

@kiokoman
I did make a static entry under DHCP static mapping for SERVER interface as 192.168.70.2.

johnpoz · Feb 25, 2020, 3:05 PM

And your sure that is correct? there for your 70.2 address.

Sniff when your pinging from pfsense server interface... Do you see the traffic go out to the correct mac, if so if no answer its on the client or the connection to the client..

If pfsense can not talk to it from its own interface in the network, then its never going to work from a different network.

ilovechickennuggets · Feb 25, 2020, 3:08 PM

@johnpoz
Yup, I just checked the MAC address, it matches.
How do I sniff while pinging? Where do I find this in pfsense?

johnpoz · Feb 25, 2020, 3:20 PM

diag menu, packet capture...

kiokoman · Feb 25, 2020, 3:30 PM

@ilovechickennuggets
but you did not answer my question, put a screenshot of that static entry pls

ilovechickennuggets · Feb 25, 2020, 3:30 PM

@johnpoz
login-to-view
login-to-view
login-to-view

I just want to let you you I appreciate and thank you for your patience. I am not too good with this area stuff. Here's what I got from the packet capture, hopefully with the right settings.

johnpoz · Feb 25, 2020, 3:38 PM

Well there are no pings in there..

So up the level of output so you can see the mac.. I think your mac is wrong to be honest. Since you set a static.

And when you did the sniff you did it at the same time as you were pinging?

Not seeing any response for dns in there either..

ilovechickennuggets · Feb 25, 2020, 4:02 PM

@kiokoman @johnpoz
login-to-view

These are the current static mapping settings of the entry. The first shows pfsense. The second shows the MAC of the nas. So to make sure I was getting the right IP and MAC, I restarted my NAS. Somehow it gave me a new IP from dhcp. I did something wrong.

P.S. kiokoman, thank you for your help too!

johnpoz · Feb 25, 2020, 4:04 PM

And can you ping this IP?

ilovechickennuggets · Feb 25, 2020, 4:04 PM

@johnpoz
Yes the sniff happened at the same time as the ping.

After I restarted my NAS just now, it gave me new IP of 192.168.70.10 - which is the start of my DHCP range.

johnpoz · Feb 25, 2020, 4:05 PM

and can you ping that?

Can your nas ping pfsense 70.1 address?

ilovechickennuggets · Feb 25, 2020, 4:10 PM

@johnpoz
login-to-view
login-to-view

Packet capture is not picking up anything during the ping

johnpoz · Feb 25, 2020, 4:24 PM

Well then no nothing is going to work... Can the server ping pfsense IP? Does internet work? You have it directly plugged into an interface on pfsense - there are no switches.

I am not sure that your doing the sniff correctly to be honest.. do a tcpdump on pfsense while you ping..

Open up 2 ssh windows to pfsense and do it this way... start a tcpdump for icmp on the interface this server network is on..

Then in the other windows ping... Then also ping from the server to 70.1 address while your sniff is running

example
login-to-view

This sever is physical right - its not some VM running on something?

Lets try this - install the package arping... Lets try that..

example
login-to-view

kiokoman · Feb 25, 2020, 4:23 PM

now i'm curious to see where the hell we are hitting the head

ilovechickennuggets · Feb 25, 2020, 4:23 PM

@johnpoz @kiokoman
The server is a physical machine directly connected to pfsense interface with no switches in between this connection. Unfortunately, I am out of time for now and will come back to this later to try this.

johnpoz · Feb 25, 2020, 4:26 PM

see my edit.. about using arping package as well.

Clearly you would use server as the interface and ip of your nas..

ilovechickennuggets · Feb 25, 2020, 10:03 PM

@johnpoz @kiokoman
Ok I did a complete shut down and reboot. The NAS is now getting the correct static IP. In Pfsense, under Status/ DHCP Leases -showing as online
login-to-view

I installed ARPing and ran it with following settings
login-to-view
login-to-view

As for SSH and tcpdump, I am going to need to educate myself on this because I'm treading onto something completely new to me. I'll be back try your advice after I go through some documentations and tutorials. I don't have SSH set up and it looks like I need to generate a key.

johnpoz · Feb 25, 2020, 10:21 PM

so arping works, but normal ping does not?

That just SCREAMS, SCREAMS!!! firewall on that box!!!

ilovechickennuggets · Feb 25, 2020, 10:22 PM

@johnpoz
login-to-view
Correct, this is the newest try at pinging.

johnpoz · Feb 25, 2020, 10:24 PM

Well your clearly arping for the IP.. Which comes back with mac correct, and you got your dhcpd address you reserved. So you seem to not being answering..

The odd thing is you didn't show any pings going out even when you tried to ping.. Which makes no sense - unless you didn't do the sniff right..

Again can the server ping pfsense IP? Sniff when your doing that test..