How to access a NAS server behind pfsense if I use wifi on livebox ?

[brycebtz]

Hello,

I'm working on my first professional network project and I'm alone in my enterprise to do that !

I decided to use pfsense because i quickly studied it in school, but i have a little problem that i can't resolv alone.

I have this network :

Livebox with wifi (192.168.1.0/24) all users have an ip adress in this network -> pfsense wan 192.168.1.2/24 –---- pfsense lan 10.0.0.1/24 dhcp range for this network (which is used by all computers in my enterprise) start at 10.0.0.10 and end at 10.0.0.254.

So we have a synology diskstation connected into the local network (ip: 10.0.0.5/24) and it is accessible by everyone which is connected in the 10.0.0.0/24 network.

I will active a captive portal with wifi to solve this problem, but now i cant do it before 6 months... and i need to use the nas.

So if laptops are connected with wifi onto the livebox, they have a 192.168.1.0/24 ip adress, so they can't access to the nas (10.0.0.5).

I think there is something to do with nat/pat in pfsense, but i'm not sure ...

A quick picture of this network to help you understand.

If someone had an idea, i'm listening to it :)
Thanks
(sorry for my bad english !)

[Metu69salemi]

What is your pfsense wan rules?

[brycebtz]

Ok, i'm so bad,this was wan rules. Thanks Metu69salemi.

There is the solution :

But now, there is another one !

Can you tell me if you have any idea to access this nas from internet ? when he was connected directly to livebox, i had to create a dmz, but now this nas is behind pfsense, how can i do that ?

thanks

[Metu69salemi]

Maybe couple of portforwards will do that(not a good solution)

as an example you.rpu.bli.cip:8081 -> 192.168.0.2:8081 -> 10.0.0.5:80

[brycebtz]

Ok, so I gess that I need to do that : you.rpu.bli.cip:8081 -> 192.168.0.2:8081 –-> on livebox, AND that : 192.168.0.2:8081 -> 10.0.0.5:80 -----> on pfSense ?

[Metu69salemi]

You got it