[SOLVED] Cant ping Pfsense Box from Diffrent subnet



  • Hay

    I am new to pfsense and im having issues pinging the pfsense box internal Gateway address from my Winserver and win client box however i can ping the pfsense box internal gw address (192.168.3.2) from the centos box and establish internet connectivity

    Also

    winserver and winclient can ping every interface beside 192.168.3.2 (ping timed out)

    i have enabled ipforwarding on the Centos box and being able to ping from the 192.168.2.0 network to 10.10.0.0 network verifys it works.

    so i have narrowed the issue down to pfsense maybe lol.

    as far as i know the pfsense box firewall is allowing all connections.

    any help would be appreciated

    Note the network is on VMware hence the VM nets  ;)

    thanks
    Ben



  • pfSense will just have a default gateway out its WAN. Packets to anything not locally connected will get sent to that default gateway. You will need to tell it about the subnets reachable through the Centos box - add the Centos box 192.168.3.1 as a gateway on LAN, then add routes to 192.168.2.0/24 and 10.10.0.0/24 that go to 192.168.3.1
    Then pfSense will know how to reply to those subnets.


  • Netgate Administrator

    Additionally the default firewall rule on LAN will only allow traffic from the LAN subnet. Traffic routed from another subnet will be blocked. Add rules to allow it.

    Steve



  • ;D Excellent

    The combination of both of your answers solved my issue, thank you both for your time and effort, i was close with the static routes but i was looking at it the wrong way, and i had no idea about that default LAN rule.

    Once again Thank you

    For any one else in the future that stumbles on this issue here is my configuration

    Image Hosted by ImageShack.us

    Image Hosted by ImageShack.us


Log in to reply