Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    2 subnets cant ping between them

    Scheduled Pinned Locked Moved Routing and Multi WAN
    6 Posts 2 Posters 2.3k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • T
      thorrr
      last edited by

      I have been at this for hours.. and i can't for the life of me figure out what i am doing wrong.

      So this is my setup

      pfsense box with

      WAN - modem
      LAN - switch, 10.0.0.0/24
      OPT1 - ESXi server, 10.0.1.0/24

      Firewall rules for LAN and OPT1 are  * * * ( ie.. Allow ALL ).

      Internet was not working on OPT1 untill i enabled AON..

      but i still can't ping or connect to the the ESXi machine. I can however ping 10.0.1.0

      1 Reply Last reply Reply Quote 0
      • marcellocM
        marcelloc
        last edited by

        The Allow all rule includes all protocols or just tcp?

        Can you do a tcpdump on opt1 to see if there is any traffic on this interface?

        Treinamentos de Elite: http://sys-squad.com

        Help a community developer! ;D

        1 Reply Last reply Reply Quote 0
        • T
          thorrr
          last edited by

          @marcelloc:

          The Allow all rule includes all protocols or just tcp?

          Can you do a tcpdump on opt1 to see if there is any traffic on this interface?

          Yes all protocols

          This is  what i get when i try to ping the machine
          Pinging 10.0.1.100 with 32 bytes of data:
          Request timed out.
          Request timed out.
          Request timed out.
          Request timed out.

          while running a packet capture on opt1:

          14:40:26.935379 IP 10.0.0.10 > 10.0.1.100: ICMP echo request, id 1, seq 781, length 40
          14:40:31.679149 IP 10.0.0.10 > 10.0.1.100: ICMP echo request, id 1, seq 782, length 40
          14:40:36.679376 IP 10.0.0.10 > 10.0.1.100: ICMP echo request, id 1, seq 783, length 40
          14:40:41.679592 IP 10.0.0.10 > 10.0.1.100: ICMP echo request, id 1, seq 784, length 40

          1 Reply Last reply Reply Quote 0
          • marcellocM
            marcelloc
            last edited by

            Listen for some time on same interface (better on console)to see if you can get some broadcast traffic from any machine no same segment.

            just a tcpdump -ni opt1_interface

            Treinamentos de Elite: http://sys-squad.com

            Help a community developer! ;D

            1 Reply Last reply Reply Quote 0
            • T
              thorrr
              last edited by

              Problem solved. I misunderstood how to assign IP's to the interface. i had input 10.0.1.0/24 however 10.0.1.0 is not a valid ip for that, it should have been 10.0.1.1/24

              Still learning ;)

              1 Reply Last reply Reply Quote 0
              • marcellocM
                marcelloc
                last edited by

                Never mind, it happens.  ;)

                Treinamentos de Elite: http://sys-squad.com

                Help a community developer! ;D

                1 Reply Last reply Reply Quote 0
                • First post
                  Last post
                Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.