<![CDATA[Multi-Lan routing]]>Hi All,

I'm quite the newbie, but I've spent a few hours looking over this, and can't quite spot the problem.  ???

I have the usual LAN nic, which is working great with traffic to WAN, however I have 2 more LAN's, which I'd like to set up routing for. I have installed an OPT nic for each, and named them. The IP ranges for the two LANs are 10.100.100.x and 10.0.5.x. I have created all the firewall rules I can possibly think to create, to no avail. For setting up purposes, I want full access from LAN to each of the other two networks, but not between them.
I suspect the problem lies with static routes, but I know too little about how it should work in this scenario.

Can someone tell me what it would require, for example, to be able to ping 10.100.100.x from my LAN(10.0.0.x) Once I know how that works, I'm fairly confident I'll be able to work out the rest from there.

Thanks for taking the time to read this. :-)

]]>https://forum.netgate.com/topic/26311/multi-lan-routingRSS for NodeSun, 13 Sep 2026 23:55:31 GMTMon, 06 Sep 2010 13:22:31 GMT60<![CDATA[Reply to Multi-Lan routing on Wed, 08 Sep 2010 08:14:31 GMT]]>;D
Thank you both for your assistance, I've managed to achieve what I set out to do, although it cost me a sleepless night.
Turns out there was a static route problem(there was a router on the OPT6 network, which was the gateway for all the machines. I setup static routing on said router for the LAN subnet through the OPT6 address, and now she works like a charm!)

Once again, thanks a stack…once I was able to rule out my PFsense box as the problem, I knew where to look. Couldn't have done it without you guys!

]]>https://forum.netgate.com/post/245648https://forum.netgate.com/post/245648Wed, 08 Sep 2010 08:14:31 GMT<![CDATA[Reply to Multi-Lan routing on Wed, 08 Sep 2010 05:17:07 GMT]]>@kevbee:

then it should allow all protocols from all IP's in either range, to all IP's in the other range, therefore I SHOULD be able to ping across the two?

Assuming no rules above those that block the traffic, the appropriate host IP configuration (correct IP, subnet mask, gateway), and no host firewalls, yes.

]]>https://forum.netgate.com/post/245634https://forum.netgate.com/post/245634Wed, 08 Sep 2010 05:17:07 GMT<![CDATA[Reply to Multi-Lan routing on Wed, 08 Sep 2010 01:47:59 GMT]]>Hi jimp,

Thanks for the reply. That's what I initially thought, but what I tried didn't seem to work.

To double check: If my LAN interface has an IP of 10.0.0.1/24, and my OPT6 has an IP of 10.100.100.1/24, and I have rules looking something like this:
LAN

OPT6

then it should allow all protocols from all IP's in either range, to all IP's in the other range, therefore I SHOULD be able to ping across the two? I haven't set up an routing for either net which could interfere…

And no, no multi-WAN, so I presume this thread is about to move house.

-Kevin

]]>https://forum.netgate.com/post/245616https://forum.netgate.com/post/245616Wed, 08 Sep 2010 01:47:59 GMT<![CDATA[Reply to Multi-Lan routing on Tue, 07 Sep 2010 13:29:13 GMT]]>That should all work out of the box, with appropriate firewall rules. You do not need static routes for directly connected subnets.

Do you have multi-wan on this box as well?

]]>https://forum.netgate.com/post/245549https://forum.netgate.com/post/245549Tue, 07 Sep 2010 13:29:13 GMT