2 subnets cant ping between them



  • I have been at this for hours.. and i can't for the life of me figure out what i am doing wrong.

    So this is my setup

    pfsense box with

    WAN - modem
    LAN - switch, 10.0.0.0/24
    OPT1 - ESXi server, 10.0.1.0/24

    Firewall rules for LAN and OPT1 are  * * * ( ie.. Allow ALL ).

    Internet was not working on OPT1 untill i enabled AON..

    but i still can't ping or connect to the the ESXi machine. I can however ping 10.0.1.0



  • The Allow all rule includes all protocols or just tcp?

    Can you do a tcpdump on opt1 to see if there is any traffic on this interface?



  • @marcelloc:

    The Allow all rule includes all protocols or just tcp?

    Can you do a tcpdump on opt1 to see if there is any traffic on this interface?

    Yes all protocols

    This is  what i get when i try to ping the machine
    Pinging 10.0.1.100 with 32 bytes of data:
    Request timed out.
    Request timed out.
    Request timed out.
    Request timed out.

    while running a packet capture on opt1:

    14:40:26.935379 IP 10.0.0.10 > 10.0.1.100: ICMP echo request, id 1, seq 781, length 40
    14:40:31.679149 IP 10.0.0.10 > 10.0.1.100: ICMP echo request, id 1, seq 782, length 40
    14:40:36.679376 IP 10.0.0.10 > 10.0.1.100: ICMP echo request, id 1, seq 783, length 40
    14:40:41.679592 IP 10.0.0.10 > 10.0.1.100: ICMP echo request, id 1, seq 784, length 40



  • Listen for some time on same interface (better on console)to see if you can get some broadcast traffic from any machine no same segment.

    just a tcpdump -ni opt1_interface



  • Problem solved. I misunderstood how to assign IP's to the interface. i had input 10.0.1.0/24 however 10.0.1.0 is not a valid ip for that, it should have been 10.0.1.1/24

    Still learning ;)



  • Never mind, it happens.  ;)


Log in to reply