ICMP in subnet

  • After installing and configuring my shiny new PFsense appliance I encountered a problem with the wireless printer of my girlfriend.
    The PFsense box has two ethernet interfaces (WAN & LAN) and an additional OPT1 interface, which is the Wifi interface. DHCP is working on both the LAN and OPT1 networks and all seems to work as it should, I can use my laptop completely wireless for surfing the internet and i can get access on the shares on the several NAS devices. Printing on my own (cabled)printer works great.
    But… When I try to ping the wireless printer (which has an address from the DHCP server) I don't get a reply. It doesn't matter what I do, it won't happen.

    Weird thing is, I can ping the printer from the PFsense box itself:
    PING ( from 56 data bytes
    64 bytes from icmp_seq=0 ttl=64 time=1.910 ms
    64 bytes from icmp_seq=1 ttl=64 time=1.673 ms
    64 bytes from icmp_seq=2 ttl=64 time=1.638 ms

    I've used Wireshark to capture the packets when I try to ping the printer, the output is attached. It looks like the gateway (PFsense) is handling the response but doesn't know it's an internal address?
    I can only ping this printer from a wired desktop, although the printer is connected by Wifi. There are no block rules on the LAN or OPT1 interfaces, allowed is any-to-any on both.

    Explanation: = IP of PFsense in OPT1 network = wireless printer = my Macbook (wireless)

    Anyone with an idea?

    ![2012-10-31 05.14.05 pm.jpg](/public/imported_attachments/1/2012-10-31 05.14.05 pm.jpg)
    ![2012-10-31 05.14.05 pm.jpg_thumb](/public/imported_attachments/1/2012-10-31 05.14.05 pm.jpg_thumb)

  • On the wireless-interface config page:
    Is the checkbox "Allow intra-BSS communication" enabled?

  • I feel stupid right now  ;)

    sanders-mbp:~ sander$ ping EPSON002BFF.localdomain
    PING epson002bff.localdomain ( 56 data bytes
    64 bytes from icmp_seq=0 ttl=64 time=335.937 ms
    64 bytes from icmp_seq=1 ttl=64 time=86.043 ms
    64 bytes from icmp_seq=2 ttl=64 time=4.178 ms
    64 bytes from icmp_seq=3 ttl=64 time=136.680 ms

    Solved within 5 minutes, should have read the manual though…

  • No reason to feel stupid ;)
    It's not that usual that an access point allows client separation.

Log in to reply