2 subnets cant ping between them

[thorrr]

I have been at this for hours.. and i can't for the life of me figure out what i am doing wrong.

So this is my setup

pfsense box with

WAN - modem
LAN - switch, 10.0.0.0/24
OPT1 - ESXi server, 10.0.1.0/24

Firewall rules for LAN and OPT1 are  * * * ( ie.. Allow ALL ).

Internet was not working on OPT1 untill i enabled AON..

but i still can't ping or connect to the the ESXi machine. I can however ping 10.0.1.0

[marcelloc]

The Allow all rule includes all protocols or just tcp?

Can you do a tcpdump on opt1 to see if there is any traffic on this interface?

[thorrr]

@marcelloc:

The Allow all rule includes all protocols or just tcp?

Can you do a tcpdump on opt1 to see if there is any traffic on this interface?

Yes all protocols

This is  what i get when i try to ping the machine
Pinging 10.0.1.100 with 32 bytes of data:
Request timed out.
Request timed out.
Request timed out.
Request timed out.

while running a packet capture on opt1:

14:40:26.935379 IP 10.0.0.10 > 10.0.1.100: ICMP echo request, id 1, seq 781, length 40
14:40:31.679149 IP 10.0.0.10 > 10.0.1.100: ICMP echo request, id 1, seq 782, length 40
14:40:36.679376 IP 10.0.0.10 > 10.0.1.100: ICMP echo request, id 1, seq 783, length 40
14:40:41.679592 IP 10.0.0.10 > 10.0.1.100: ICMP echo request, id 1, seq 784, length 40

[marcelloc]

Listen for some time on same interface (better on console)to see if you can get some broadcast traffic from any machine no same segment.

just a tcpdump -ni opt1_interface

[thorrr]

Problem solved. I misunderstood how to assign IP's to the interface. i had input 10.0.1.0/24 however 10.0.1.0 is not a valid ip for that, it should have been 10.0.1.1/24

Still learning ;)

[marcelloc]

Never mind, it happens.  ;)