Configure multiple NICs and Wireless; must allow traffic across interfaces



  • I'm new, and yes I have googled and searched for answers to what I'm about to ask to no avail.

    I need some help setting up/configuring my PFSense Router to be able to allow for multiple computers and one printer to be able to communicate with each other when hooked up to the Router through seperate NICs. I am not tied to any subneting configuration, I am perfectly willing to adjust ANYTHING in the configuration to make this work.

    First, my current setup which works and looks like this:

    Modem>> 1000BaseT (msk0) >> Router >> 1000BaseT (em0) (192.168.1.X) >> 100BaseT Switch >> (Everything Else)

    What I want to do is:

    |>>100BaseT (dc0)>>A/V Receiver
          Laptop<<wireless g="" (ath0) ="" |<br="">                                      \      |>>100BaseT (dc1)>>Playstation 3
                                            \    |
                                            \    |
    Modem>>1000BaseT (msk0)>> Router>>1000BaseT(em0)>>PC1
                                                  |
                                                  |
                                                  |>>100BaseT (dc2)>>Printer
                                                  |
                                                  |>>100BaseT (dc3)>>Switch>>(Whatever I need to temporarily hookup)

    (If this ASCII Art doesn't format correctly, just look at the two pictures I've attached to see what I'm trying to descibe)

    When I've tried hooking things up in the second configuration, everything has had access to the internet but I've never been able to get communications across subnets to work: e.g. the printer couldn't be found, network shares couldn't be seen, pinging didn't work, etc…

    I'm trying to get it so that the PFSense router is the single hub for everything else, and that my main PC is hooked up by gigabit to the cable modem on gigabit so that I can get the highest through-put from my internet connection. I do not currently have nor do I want to spend the money on getting a managed gigabit switch at this time. I just can't see why I can't configure this to work.

    My question is: What do I have to do to configure PFSense (be it the firewall, changing IP Block from 192.168.X.X to 172.16.X.X or 10.X.X.X, whatever...)

    Any thoughts?

    -RS



    </wireless>



  • Firewall rules that allow trafic between interfaces.



  • @Metu69salemi:

    Firewall rules that allow trafic between interfaces.

    What would these rules be?

    I know how to add rules to the firewall, but I'm not entirely clear what all the options on a the PFSense webinterface mean or do.

    -RS



  • okay..

    What you want to allow that is something what you need to decide. But now i assume that you want to allow anything

    1. You may want create network alias to help out this rule(Firewall: Alias)
    2. goto your lan rule tab(Firewall:Rules:Lan) and create rule
      Action: Pass
      Interface: Lan
      Protocol: any
      Source: any
      Destination: Your newly created alias
      Destination port range: any
      Description: Write descriptive name

    all the advanced features isn't needed currently, if you don't need any scheduling, or different gateway etc



  • @Metu69salemi:

    okay..

    What you want to allow that is something what you need to decide. But now i assume that you want to allow anything

    1. You may want create network alias to help out this rule(Firewall: Alias)
    2. goto your lan rule tab(Firewall:Rules:Lan) and create rule
      Action: Pass
      Interface: Lan
      Protocol: any
      Source: any
      Destination: Your newly created alias
      Destination port range: any
      Description: Write descriptive name

    all the advanced features isn't needed currently, if you don't need any scheduling, or different gateway etc

    Nope, nothing advanced, I just basically want the firewall to be absolutely transparent for everything on the LAN/WLAN side and to only really be active between the WAN and the LAN/WLAN.

    Does that make any sense?

    I'm running PFSense 2.0 now, if that makes any difference.

    So what exactly does a Firewall Alias do and why would I want to use it in this case? I'm just trying to understand the concepts that I'm using so I will be able to do this on my own next time.

    -RS


Log in to reply