Firewall and routing for my LAN
-
@kramnoraa said in Firewall and routing for my LAN:
With these configs, when i do a ping on the (10.45.0.2) user machine 'ping -I uesimtun0 192.168.56.1', i can capture the 10.45.0.2 machine pinging pfSense
Where can you capture this?
I don't expect, that you see a source IP out of 10.45.0.0/16 on pfSense.But i am unable to capture the traffic from the 10.45.0.0/16 subnet itself (10.45.0.2 > 10.45.0.4), when i ping .2 to .4 or ftp from .2 to .4
10.45.0.4 is new IP in play. To which device does it belong to?
-
@viragomann in the pfsense packet capture, i can see 10.45.0.2 pinging 192.168.56.1
10.45.0.4 is the new 10.45.0.3 as when i restart the user equipment it increments the IP, but its on the ftp machine
-
Hmm. It's a difficult simulation because in a real 5G network none of the clients or end servers could connect directly.
A better setup might be to have each client in it's own virtual network with just the client NIC and a NIC from the 5G VM. That way each client could only ever connect to the 5G network and would be required to connect to it to reach anything else. You may be limited by VBox as to how many networks you can have.
Though it depends exactly what you're trying to simulate here.
-
@stephenw10 I'm basically trying to simulate access controls with the use of the firewall, just want one user (10.45.0.2) to have have a rule configured that allows access to the ftp server and blocks access to the ftp server.
-
@kramnoraa said in Firewall and routing for my LAN:
in the pfsense packet capture, i can see 10.45.0.2 pinging 192.168.56.1
And this is coming from the 5g machine? So you should also see the packets on its enp0s3, I think?
But i am unable to capture the traffic from the 10.45.0.0/16 subnet itself (10.45.0.2 > 10.45.0.4), when i ping .2 to .4 or ftp from .2 to .4
Do you mean on pfSense here as well?
I do a tcpdump on the ogstun interface on the 5g vm (as it captures all the 5g network traffic), and i can only see ICMP requests and no replies
Did you already remove the 10.45.0.0/16 IP from pfSense?
-
So in the real setup the firewall would be at the client or in the 5G network?
