Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    LAN2 gateway can ping AP, but AP can't ping LAN2 gateway

    Scheduled Pinned Locked Moved General pfSense Questions
    5 Posts 2 Posters 593 Views 2 Watching
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • S Offline
      seantree
      last edited by

      Hi guys,

      I've been working for this issue for hours. It's a new install of 2.5.2. I created two subnets, LAN and LAN2. LAN is working fine. The problem is LAN2.

      I can ping AP from LAN2 gateway(pfsense), but can't ping LAN2 gateway from AP.
      All the device in LAN2 can ping each other, but can't ping LAN2 gateway.
      I've set an anytoany firewall rule in LAN2, the problem is remain
      Nothing enabled in LAN2, no Squid, no PfBlockerNG
      Subnet and subnet mask has been checked carefully.

      Question? Solution?

      1 Reply Last reply Reply Quote 0
      • S Offline
        seantree
        last edited by

        Also, all the devices in LAN2 can get DHCP from LAN2 gateway........

        1 Reply Last reply Reply Quote 0
        • stephenw10S Offline
          stephenw10 Netgate Administrator
          last edited by

          That sounds like the firewall rule on LAN2 is not matching the traffic. Can we see a screenshot?

          Steve

          1 Reply Last reply Reply Quote 1
          • S Offline
            seantree
            last edited by

            Thank you for your reply, Steve.

            I got a stupid mistake, I didn't allow ICMP package in the firewall rule. I only set a TCP/UDP rule anyany in the firewall. But the thing was, I was not able to go outside/browse Internet. The following is what I did after

            • power off PfSense
            • remove network adapter of LAN2
            • add network adapter of LAN2
            • power on PfSense and redo everything
              Then it started working
            1 Reply Last reply Reply Quote 0
            • stephenw10S Offline
              stephenw10 Netgate Administrator
              last edited by

              It's common to set TCP only (the default) and that will not allow DNS which can present as you saw it.
              With a TCP/UDP to any rule you would expect to be able to browse though.

              Steve

              1 Reply Last reply Reply Quote 0
              • First post
                Last post
              Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.