New interface - no internet

unsichtbarre

I can traffic to route to any other LAN segment but not go out the WAN to internet. I am puzzled.

I have added a new interface to my lab - essentially a new LAN with nothing special - same as 3 other lab LAN segments

I created VLAN 23 on all switches
I Created VLAN 23 in pfSense
I added the interface in pfSense (Opt 9)
I enabled Opt 9 and gave it a classful class C IP: 192.168.243.1/24
I created a firewall rule for permit anything IPc4 / Any / Any

When I put any system on VLAN 23, it gets DHCP from pfSense, I can ping the pfSense Gateway IP (I can arp it too and make sure the MAC matches) and routing works for all 3 other LAN segments (which are also VLANs) - but I can's get anything to go to the internet!!!

THX in ADV
-JB

NollipfSense

@unsichtbarre Did you assigned the interface or did you just install it? You would need to assign any new interface. It appeared you did so disregard.

unsichtbarre

Thanks, but yes it was assigned. vmx1.23 became Opt 9 when I assigned it.

Appreciate the thoughts!

viragomann

@unsichtbarre
Is the outbound NAT in automatic mode?
If so check if there is a rule created for the subnet, otherwise add it manually.

Did you state a gateway in the interface settings?

marvosa

Yep, I'd check your NAT statements.

You'll also want to isolate whether you actually can't get to the internet or have a DNS issue. Can the clients resolve google.com? Can the clients' ping 8.8.8.8? Can you ping 8.8.8.8 from PFsense when sourced from the OPT9 interface?

Are you using the Forward or the resolver? If using the forwarder, is it listening on the OPT9 interface? If using the resolver, two questions... is it listening on the OPT9 interface and if you're using ACL's... was 192.168.243.0/24 added to the allow list?