Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Configure multiple NICs and Wireless; must allow traffic across interfaces

    Scheduled Pinned Locked Moved Routing and Multi WAN
    5 Posts 2 Posters 2.2k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • R
      rsagris
      last edited by

      I'm new, and yes I have googled and searched for answers to what I'm about to ask to no avail.

      I need some help setting up/configuring my PFSense Router to be able to allow for multiple computers and one printer to be able to communicate with each other when hooked up to the Router through seperate NICs. I am not tied to any subneting configuration, I am perfectly willing to adjust ANYTHING in the configuration to make this work.

      First, my current setup which works and looks like this:

      Modem>> 1000BaseT (msk0) >> Router >> 1000BaseT (em0) (192.168.1.X) >> 100BaseT Switch >> (Everything Else)

      What I want to do is:

      |>>100BaseT (dc0)>>A/V Receiver
            Laptop<<wireless g="" (ath0) ="" |<br="">                                      \      |>>100BaseT (dc1)>>Playstation 3
                                              \    |
                                              \    |
      Modem>>1000BaseT (msk0)>> Router>>1000BaseT(em0)>>PC1
                                                    |
                                                    |
                                                    |>>100BaseT (dc2)>>Printer
                                                    |
                                                    |>>100BaseT (dc3)>>Switch>>(Whatever I need to temporarily hookup)

      (If this ASCII Art doesn't format correctly, just look at the two pictures I've attached to see what I'm trying to descibe)

      When I've tried hooking things up in the second configuration, everything has had access to the internet but I've never been able to get communications across subnets to work: e.g. the printer couldn't be found, network shares couldn't be seen, pinging didn't work, etc…

      I'm trying to get it so that the PFSense router is the single hub for everything else, and that my main PC is hooked up by gigabit to the cable modem on gigabit so that I can get the highest through-put from my internet connection. I do not currently have nor do I want to spend the money on getting a managed gigabit switch at this time. I just can't see why I can't configure this to work.

      My question is: What do I have to do to configure PFSense (be it the firewall, changing IP Block from 192.168.X.X to 172.16.X.X or 10.X.X.X, whatever...)

      Any thoughts?

      -RS
      current.jpg
      current.jpg_thumb
      proposed.jpg
      proposed.jpg_thumb</wireless>

      1 Reply Last reply Reply Quote 0
      • M
        Metu69salemi
        last edited by

        Firewall rules that allow trafic between interfaces.

        1 Reply Last reply Reply Quote 0
        • R
          rsagris
          last edited by

          @Metu69salemi:

          Firewall rules that allow trafic between interfaces.

          What would these rules be?

          I know how to add rules to the firewall, but I'm not entirely clear what all the options on a the PFSense webinterface mean or do.

          -RS

          1 Reply Last reply Reply Quote 0
          • M
            Metu69salemi
            last edited by

            okay..

            What you want to allow that is something what you need to decide. But now i assume that you want to allow anything

            1. You may want create network alias to help out this rule(Firewall: Alias)
            2. goto your lan rule tab(Firewall:Rules:Lan) and create rule
              Action: Pass
              Interface: Lan
              Protocol: any
              Source: any
              Destination: Your newly created alias
              Destination port range: any
              Description: Write descriptive name

            all the advanced features isn't needed currently, if you don't need any scheduling, or different gateway etc

            1 Reply Last reply Reply Quote 0
            • R
              rsagris
              last edited by

              @Metu69salemi:

              okay..

              What you want to allow that is something what you need to decide. But now i assume that you want to allow anything

              1. You may want create network alias to help out this rule(Firewall: Alias)
              2. goto your lan rule tab(Firewall:Rules:Lan) and create rule
                Action: Pass
                Interface: Lan
                Protocol: any
                Source: any
                Destination: Your newly created alias
                Destination port range: any
                Description: Write descriptive name

              all the advanced features isn't needed currently, if you don't need any scheduling, or different gateway etc

              Nope, nothing advanced, I just basically want the firewall to be absolutely transparent for everything on the LAN/WLAN side and to only really be active between the WAN and the LAN/WLAN.

              Does that make any sense?

              I'm running PFSense 2.0 now, if that makes any difference.

              So what exactly does a Firewall Alias do and why would I want to use it in this case? I'm just trying to understand the concepts that I'm using so I will be able to do this on my own next time.

              -RS

              1 Reply Last reply Reply Quote 0
              • First post
                Last post
              Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.