Simple basic … wan <> pfsense <> lan

bano007

Hi to all,

Since i am a total noob at this ž, with only basics in networking, i would ask for help.

I am trying to put a pfsense in the middle so it acts like firewall between wan and lan.

My router is in router mode (dhcp OFF) it has IP 192.168.1.1

I installed on a pc with two ethernet cards pfsense, wan adapter has 192.168.1.8, and LAN adapter has 192.168.1.1

pfsense has DHCP on with gateway 192.168.1.1 and everything works ok, i see internet on a pc in lan network, he got ip from dhcp…

question is is this ok?

cause i think i am bypassing my pfsense?!?! since everything is in the same subnet?!?!

if i change ip of router to other subnet it stops working?!?

if it's wrong can someone explain how it should be done...

thx to all

noob from croatia

esanchez

You probably should change the LAN Subnet, you can do something like this:

–--------
---------| Client 1 | 192.168.2.2
| ----------
--------- ---------- / -----------
| Router | ----------------| pfSense | -------------------| Client 2 | 192.168.2.3
--------- ---------- \ -----------
192.168.1.1 PFS Wan: 192.168.1.8 | ----------
PFS Lan: 192.168.2.1 ---------| Client 3 | 192.168.2.4
----------

Then you're DHCP should have gateway 192.168.2.1 for clients.

hope this helps,

bano007

@esanchez:

You probably should change the LAN Subnet, you can do something like this:

–--------
---------| Client 1 | 192.168.2.2
| ----------
--------- ---------- / -----------
| Router | ----------------| pfSense | -------------------| Client 2 | 192.168.2.3
--------- ---------- \ -----------
192.168.1.1 PFS Wan: 192.168.1.8 | ----------
PFS Lan: 192.168.2.1 ---------| Client 3 | 192.168.2.4
----------

Then you're DHCP should have gateway 192.168.2.1 for clients.

hope this helps,

i'll try in morning then i will tell you results… thx

THX it worked!! :)

jahonix

@esanchez:

You probably should change the LAN Subnet…

PFS Wan: 192.168.1.8
PFS Lan: 192.168.2.1

Do NOT forget to specify a netmask when talking IP addresses!
192.168.1.8/24 does NOT equal 192.168.1.8/16
With your figures above a /16 would bridge your networks. A /24 doesn't

bano007

@jahonix:

@esanchez:

You probably should change the LAN Subnet…

PFS Wan: 192.168.1.8
PFS Lan: 192.168.2.1

Do NOT forget to specify a netmask when talking IP addresses!
192.168.1.8/24 does NOT equal 192.168.1.8/16
With your figures above a /16 would bridge your networks. A /24 doesn't

THX

bano007

@bano007:

@jahonix:

@esanchez:

You probably should change the LAN Subnet…

PFS Wan: 192.168.1.8
PFS Lan: 192.168.2.1

Do NOT forget to specify a netmask when talking IP addresses!
192.168.1.8/24 does NOT equal 192.168.1.8/16
With your figures above a /16 would bridge your networks. A /24 doesn't

THX

One more question… i tryed to put in slot one more network card but i messed it up (long story short)... so i had to put it back as it was, but i can't remember does LAN have to bridge WAN?!?! or not....

So on interfaces > LAN > bridge WAN or none?? for the simple example above

when not bridged internet on pc-s doesn't work... cant ping DSL modem? and i am shure that it wasn't bridged before :(

I am little bit confused...

thx