NAT Issues - Multi (V)LAN to Multi VLAN



  • HI,

    I am trying to configure a failover cluster of pfsense boxes, and everything seems to be working as I would like it, bar NAT.

    The setup I have is as follows:

    2 pfSense boxes, with 5 trunks running to each (External, DMZ, Lab, Desktop and Servers) each of the trunks carry multiple VLANs, external connectivity is via a Leased line and 2 x ADSL lines.

    The pfSense boxes are the default gateways (using a CARP interface) and the external IP addresses are also virtual IPs.

    From devices connected to the firewalls I can ping other devices on the network in other VLANs (when the default GW is a CARP interface on the pfSense boxes). However I cannot ping or connect to the internet. addresses.

    I have verified from the pfSense boxes that I can ping and wget to various public addresses, and the default gateway addresses. So I think its a NAT problem, so has anyone got any guidance on what I should be looking to fix this?

    Rich



  • scratch this, I have worked it out. I assumed that the interface would be for the VLAN rather than the external.

    stupid mistake.


Log in to reply