Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Cannot ping from OPT1 to OPT2 but can the other way…?

    Firewalling
    2
    25
    5.1k
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • P
      podilarius
      last edited by

      Are there any tools on the WAP that you can use? Like traceroute, ping, or anything? Have you recently upgraded the firmware or something? id you upgrade pfsense recently? Can you post your LAN, OPT1, and OPT2 rules?

      1 Reply Last reply Reply Quote 0
      • B
        burnsl
        last edited by

        No tools on the wap.
        I'll post my rules in a few moments.
        Stand by…

        1 Reply Last reply Reply Quote 0
        • B
          burnsl
          last edited by

          @podilarius:

          Are there any tools on the WAP that you can use? Like traceroute, ping, or anything? Have you recently upgraded the firmware or something? id you upgrade pfsense recently? Can you post your LAN, OPT1, and OPT2 rules?

          Here they are, the two nets.  all rules but (* ANY) disabled.

          FW_RULES_2_NET.JPG
          FW_RULES_2_NET.JPG_thumb
          FW_RULES_5_NET.JPG
          FW_RULES_5_NET.JPG_thumb

          1 Reply Last reply Reply Quote 0
          • P
            podilarius
            last edited by

            So the rules are strait forward, okay … enable ssh on pfsense. using ssh login several times to pfsense. The purpose is to run tcpdump on each interface involved.
            Using tcpdump watch for the originating traffic from the client, then see if it makes it to the other side of pfsense (which according to the rules should work with no problem). The watch to see if you see any traffic returned from the WAP. You can setup 4 ssh sessions, two for each interface watching in and out on each.

            1 Reply Last reply Reply Quote 0
            • B
              burnsl
              last edited by

              Interesting idea.

              Will do.

              1 Reply Last reply Reply Quote 0
              • First post
                Last post
              Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.