Port forward to IP on remote subnet

  • Hi,

    I have problem while forwarding port to IP located on remote subnet:

    WAN–-pfSense ( ----------( Layer 3 switch ( --------------( Computer

    Port forwarding in subnet 192.168.12.x is working. Also static routes are configured and pfSense can ping computer (this computer is also accessible from 192.168.12.x subnet).

    But stadard port forward to is not working.

    Thank you in advance.


  • You cannot port forward across another router (or L3 switch). You must NAT -> Port Forward from pfSense to the L3 switch. Then on the L3 switch again NAT Port Forward the same port to the computer. The computer should also be configured to use the L3 switch as a gateway, and the L3 switch must use pfSense as a gateway.

  • Not sure if this would work but if you get an ICMP reply your routing sems to be basically working.
    Try: System: Advanced: Firewall and NAT -> Mark Static route filtering to "Bypass firewall rules for traffic on the same interface"

    This helped me to get some multi-lan-segment-hassle straight.

    Best regards, Holger

  • Hi,
    dariuslightcon.com i have the same problem. I also for make static ARP entries to next hop router for the mapped ip address with no hope. Have you found any solution since you created this post ?

    Thank you in advance.


  • LAYER 8 Netgate

    Please start your own thread.

    After correcting the record left by @KurianOfBorg, which is 100% incorrect (You can port forward to an address behind another router/L3 switch no problem) I am locking this one as ancient.

Log in to reply