Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Unable to Ping Gateway From inside its own VLAN.

    Scheduled Pinned Locked Moved Firewalling
    11 Posts 2 Posters 715 Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • Bob.DigB
      Bob.Dig LAYER 8 @Nath2125
      last edited by Bob.Dig

      @Nath2125 WireGuard as a name is really bad because there is a built-in "interface-group" with that name. Also you should check the red bell with the 57 messages and clear and resolve the issues first before doing anything else.

      N 1 Reply Last reply Reply Quote 0
      • N
        Nath2125 @Bob.Dig
        last edited by

        @Bob-Dig the alerts I ignore as they're for ssl certificate expiry I am not needing at this stage. I wasn't aware of any interface name conflictions I will change that now. Would that cause possible issues like this?

        Bob.DigB 1 Reply Last reply Reply Quote 0
        • Bob.DigB
          Bob.Dig LAYER 8 @Nath2125
          last edited by

          @Nath2125 said in Unable to Ping Gateway From inside its own VLAN.:

          Would that cause possible issues like this?

          I am not a developer but maybe you tell them here if this solved your problem.

          N 1 Reply Last reply Reply Quote 0
          • N
            Nath2125 @Bob.Dig
            last edited by

            @Bob-Dig It seems it didn't, but appreciate your help regardless.

            Bob.DigB 1 Reply Last reply Reply Quote 0
            • Bob.DigB
              Bob.Dig LAYER 8 @Nath2125
              last edited by

              @Nath2125 said in Unable to Ping Gateway From inside its own VLAN.:

              it didn't

              Your rule looks ok so it might be a problem outside of pfSense.

              N 1 Reply Last reply Reply Quote 0
              • N
                Nath2125 @Bob.Dig
                last edited by

                @Bob-Dig Yea, I thought so, but I set everything up the same way as the others vlans that work fine, and I can ping 8.8.8.8 out from the host and also get to my pihole (DNS port) on another vlan just fine. All of which are done via rules I've had added from the get go, but when I add the ICMP one to the ping its own gateway interface just doesn't seem to like it or something else is conflicting.

                I did some quick chatgpt and checked "states" as well but no entries for any states on that interface either.

                1 Reply Last reply Reply Quote 0
                • N
                  Nath2125
                  last edited by

                  Not sure if this helps and came from chat, but ran this in the pfsense shell and my icmp rule if im not mistaken should be labeled here but its not.

                  30642713-eeb5-4bdb-9793-6f8e822e1108-image.png

                  1 Reply Last reply Reply Quote 0
                  • N
                    Nath2125
                    last edited by

                    I have a feeling my issue is for some reason after submission via the webgui its not actually applying it on the backend.

                    N 1 Reply Last reply Reply Quote 0
                    • N
                      Nath2125 @Nath2125
                      last edited by

                      Going to mention here as I cant seem to edit the OP. I am on the latest version: 2.8.0-RELEASE

                      1 Reply Last reply Reply Quote 0
                      • N
                        Nath2125
                        last edited by

                        It appears after more digging I found my fix. Sort of my fault In a way. I noticed in the command above that my rules that were being applied from the webgui were not showing on the backend rules. After scratching my a head a while, I looked at pfblockerng and noticed it was creating a lot of table IP entries and erroring due to limit. I did enable Geo and IP blocking which would created massive lists and due to this getting stuck it wouldn't write my firewall changes down. So I have adjusted the list limit and audited the IP lists I have enabled, and my rules are now showing.

                        1 Reply Last reply Reply Quote 0
                        • First post
                          Last post
                        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.