HELP with Rules or Nat Please

  • Hello I really could use some help here before i pull the rest of my hair out.


    Wan DHCP - - Cisco Router

    Lan - Management

    Student Vlan 5 - - Unifi Wireless AP

    Faculty - Vlan 6 - - Unifi Wireless AP

    DMZ - - Static

    I have some servers that need to be connected via DMZ in my existing lan that need to be seen on the Faculty Lan but not seen by the Student Lan illustrated here.
    i have tried everything rules,nat 1.1, port forward.. nothing works. What am i doing wrong?

    In a netshell i want Faculty vlan to see server connected to the dmz interface.

    Thanks for your advance help!!!!!

    Can someone help please. I really need to get this working asap.

  • Don't post the same thing to multiple forums. Put it in general questions if you aren't sure where to put it. This is a firewalling question so I left this instance.

    You just need to configure your firewall rules accordingly.

  • LAYER 8 Global Moderator

    So first off I would ask for more information..  For starters this doesn't make any sense

    DMZ - - Static
    In a netshell i want Faculty vlan to see server connected to the dmz interface.

    So which is it - is the faculty vlan  Or is on a

    Also curious if your going to want access from the wan to anything behind pfsense - since your wan is private, are you double natting.  Or have you disabled nat on pfsense and just using as router/firewall?

    But if all your talking about is lan side segments to talk or not to talk to other lan segments its simple firewall rules on those interfaces.  If are using nat then port forwarding would come into play and wan firewall rules, if no nat then just firewall rules on wan and lan interfaces to allow the traffic you want.

Log in to reply