Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Re: [Multiple LANs sharing single WAN interface](/topic/184137/multiple-lans-sharing-single-wan-interface)

    Scheduled Pinned Locked Moved General pfSense Questions
    4 Posts 4 Posters 408 Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • T
      the.loquitur
      last edited by

      What I'm trying to say is that traffic from LAN1 has access to WAN (the Internet) when its destination is any. But when I simply assign WAN as the destination, the connection to the internet fails. Why?

      Bob.DigB GertjanG 2 Replies Last reply Reply Quote 0
      • Bob.DigB
        Bob.Dig LAYER 8 @the.loquitur
        last edited by Bob.Dig

        @the-loquitur said in Re: [Multiple LANs sharing single WAN interface](/topic/184137/multiple-lans-sharing-single-wan-interface):

        But when I simply assign WAN as the destination, the connection to the internet fails.

        It doesn't fail, at least if you have assigned the WAN gateway. But every local traffic will fail.
        If you talking about WAN_net then read below.

        1 Reply Last reply Reply Quote 1
        • GertjanG
          Gertjan @the.loquitur
          last edited by

          @the-loquitur said in Re: [Multiple LANs sharing single WAN interface](/topic/184137/multiple-lans-sharing-single-wan-interface):

          But when I simply assign WAN as the destination

          'WAN' is not 'all the internet'.
          It's a network, like "192.168.10.4/24" (RFC1918 if you have an upstream router)

          1752a8a0-ecf1-4596-8d1b-b3029c896c52-image.png

          or

          82.127.26.103/24
          

          If you got a routable IP from your ISP - for exampel when you use a modem.
          so WAN would be : any device from 82.127.26.1 to 82.127.26.254 .... and that is not much (probably the other 253 ISP clients - and they do not host any services for you ^^)

          No "help me" PM's please. Use the forum, the community will thank you.
          Edit : and where are the logs ??

          1 Reply Last reply Reply Quote 1
          • stephenw10S
            stephenw10 Netgate Administrator
            last edited by

            Yup also see your other identical question: https://forum.netgate.com/post/1136501

            You must use block rules for local subnet and any for the destination in pass rules. Or you can use 'not local' as a destination but it's generally better to avoid that.

            Steve

            1 Reply Last reply Reply Quote 0
            • First post
              Last post
            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.