Multiple interfaces seeing each other

[mingk]

Hi all

I have 3 interfaces total - WAN, LAN1, and LAN2.
LAN1 is my main interface and LAN2 is basically a 10GB NIC plugged into my server's 10GB nic.
I would like to be able to access my server from computers on LAN1.

What would be the best way to do this? Create a bridge? Setup 2 different subnets (192.168.0.1 and 192.168.1.1) and create rules for them to pass traffic to each other? Not sure if those are even a correct solution to my problem..

Looking for some professional opinions :D
Thanks!

[Rico]

You almost never want to create a bridge.
Give LAN2 a different subnet as you already said, add Firewall Rules to allow traffic and let it flow.

-Rico

[mingk]

@Rico
Thank so much!

To allow traffic, do I need to make a rule on each interface?
So on Lan1 interface allow Lan2 traffic to Lan1 net, and on Lan2 interface allow Lan1 traffic to Lan2 net?

Does that make sense?

[Rico]

With the Default allow LAN to any rule on LAN1 you have the traffic already flowing from LAN1 -> LAN2
Now it depends on what you want to do. If you just want any device can access any device add the same Rule on your LAN2.

-Rico

[Rico]

Depending on what you run on this Server, maybe building a DMZ would be a good option for you...now when you have two subnets anyway.
There is a GREAT hangout done by jimp on Creating a DMZ: https://www.netgate.com/resources/videos/creating-a-dmz-on-pfsense.html

-Rico