4 interfaces (1 WAN 2 LAN) not routing
-
After adding firewall rules, the LAN1 is not able to reach LAN2. If the WAN cable is detached and the firewall rules are flushed using
pfctl -F rules
the SSH is still not able to reach from LAN1 to LAN2. The routesnetstat -rn
list all of the subnets and interfaces.Using firewall gateway option redirects the packages to the interface ip-address and the packets won't go further from this.
Removing WAN-cable, disabling the firewall and the gateway option and using
tcpdump
to print the traffic, only TCP syn packets are sent from LAN1 to LAN2 and nothing is coming back from LAN2 to LAN1.The OpenVPN creates a routing problem. I'm assuming the routes have to be added using OpenVPN
route
directive in the text box. I'm assuming the default route created by OpenVPN will block all other routes. It uses a mask of 1 and networks 128.0.0.0/1 and 0.0.0.0/1.How do I enable LAN to LAN traffic? Is it through the loopback?
-
@nunu There was an outbound NAT rule from LAN1 to a subnet not in LAN1 and it took a long time to realize. All in order for now. It helps writing it down somewhere. Cisco devices sometimes use loopback.