Navigation

    Netgate Discussion Forum
    • Register
    • Login
    • Search
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search

    Is this possible with pfsense

    NAT
    3
    4
    224
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • D
      dzinks last edited by

      HI

      Production Environment:
      Core router LAN 192.168.1.0/24
      192.168.1.10 - server
      192.168.1.100 - host

      |
      |
      |
      |
      10.10.10.1
      pfSense
      192.168.1.1
      |
      |
      |
      |
      Test Environment
      LAN 192.168.1.0/24
      192.168.1.10 - server

      Router in Production Environment have static route to 10.10.10.0/24 gw 10.10.10.1

      Needed :
      Host 192.168.1.100 -> 10.10.10.10 (pfSense) -> 192.168.1.10 (behind pfSense)
      192.168.1.10 -> 10.10.10.1 (pfSense) -> 192.168.1 gw LAN production -> WAN Production

      1 Reply Last reply Reply Quote 0
      • D
        dlogan last edited by

        @dzinks said in Is this possible with pfsense:

        Core router LAN 192.168.1.0/24

        I'm not sure I understand the scenario. Is there both some other core router with 192.168.1.0/24 and a pfSense router with 192.168.1.0/24 behind it?

        Maybe use https://app.diagrams.net/ and draw your scenario

        A host at 192.168.1.100 trying to get to 192.168.1.10 is not going to reach out to it's default gateway, those 2 devices are in the same subnet.

        1 Reply Last reply Reply Quote 0
        • D
          dzinks last edited by

          Two places, the production environment and the sandbox environment

          In both places there are (mirrored) servers with the same IP addresses on the network cards

          I need communication to and from the sandbox environment with the preservation of IP addresses on both sides (servers)

          NogBadTheBad 1 Reply Last reply Reply Quote 0
          • NogBadTheBad
            NogBadTheBad @dzinks last edited by NogBadTheBad

            @dzinks You'd need two pfSense routers connected via their WAN interface.

            192.168.1.0/24 can't exist on the same router with different interfaces.

            You'd need to do a 1:1 NAT on both routers with different addresses poining to 192.168.1.0 for Production and Sandpit.

            https://docs.netgate.com/pfsense/en/latest/nat/1-1.html

            https://www.netgate.com/resources/videos/nat-on-pfsense-23.html

            Andy

            1 x Netgate SG-4860 - 3 x Linksys LGS308P - 1 x Aruba InstantOn AP22

            1 Reply Last reply Reply Quote 0
            • First post
              Last post