3 NICS

etillett

Hi Everyone,

I really would like to know if this is possible with pfsense.

Problem:
I have 3 Nic
rl0 = Wan 10.0.0.134
nfe0=Lan 192.168.2.1
rl1 = OPT1 192.168.0.7

in the rl1=0pt1 I have a switch then connected to a web server which host my school intranet having the ip 192.168.0.4

What i Need to do is to have host on nfe0 connect to the local webserver. For example users can type in their browser http://192.168.0.4 then they can see the intranet web page.

is this possible?

Please Help
etillett

clarknova

That's possible. Your web server on 192.168.0.4 as well as the licent machines on the LAN will have to know their correct gateway (unless you plan to run internal NAT), and you will have to create a firewall rule on the LAN interface allowing traffic to the web server.

etillett

thank for the answer.

Can you please give me futher explatnation? Appreciate very much

thanks
etillett

clarknova

If you are running the dhcp server on LAN and OPT1, then all your dhcp clients will get their gateway automatically. That takes care of the routing question.

Then in the firewall, you need to make sure you have a pass rule on each interface to allow traffic to the other subnet, or at least to the hosts and ports that you will need access to. By default, there is a rule on the LAN that passes all traffic from the LAN subnet. You could make a new rule based on this rule (using the plus sign to the right of it), and change Interface:LAN to Interface:OPT1, and Source:LAN subnet to Source:OPT1 subnet.

Save and apply changes. You should be good to go.

etillett

Thanks for the promot replay.
But I'm still having problems.

I didn't explain that host are accessing the internet internet through the rl0-(WAN IP: 10.0.0.134 and gateway 10.0.0.2). I notice that when I try a tracert 192.168.0.4/ i get routed to 10.0.0.2(gateway to the Internet) from lan.

I can ping 192.168.0.7 which is my OPt1 which i know is working.

I am trying to set something like DMZ.

Thanks. Please help
etillett

clarknova

Please attach a screenshot of your Status:Interfaces page.

etillett

Here is the screen shoot

Thanks for your relply!

screenshot.jpg_thumb

clarknova

Your subnet mask on OPT1 is wrong. It needs to be at most /29, probably /24, to be able to route to 192.168.0.4.

etillett

Thanks I got it working!