Routing Problem.

schimmelpfeng

Good afternoon staff,

I have a problem internal routing here.
I have 4 NICs, 2 WAN and LAN 2.
The 2 networks typically browse the internet, but one can not get at the other.
I have created the rule 2 interfaces LAN allowing access from 2 networks normally, but when I send a traceroute on my machine it can not get from one network to another.

The two networks can reach pfSense without problem.

Thank you!

heper

both LANs can get to the internet? But they can not contact each other ?

–-> create a firewall rule on LAN1: ALLOW PROTO:any SRC: lan1-subnet DST: lan2-subnet
---> create a firewall rule on LAN2: ALLOW PROTO:any SRC: lan2-subnet DST: lan1-subnet

But both rules on TOP of the rule list to start. (you can experiment with lowering them afterwards)

schimmelpfeng

Thanks for Reply.

It's working now.
I create this 2 rules and 2 more rules.

–-> create a firewall rule on LAN1: ALLOW PROTO:any SRC: lan1-subnet DST: lan2-subnet
---> create a firewall rule on LAN1: ALLOW PROTO:any SRC: lan2-subnet DST: lan1-subnet
---> create a firewall rule on LAN2: ALLOW PROTO:any SRC: lan2-subnet DST: lan1-subnet
---> create a firewall rule on LAN2: ALLOW PROTO:any SRC: lan1-subnet DST: lan2-subnet

Thanks for the help!!! ;)

Derelict

Rules 2 and 4 are never fired. In general, pfSense rules apply to traffic coming IN (received by) an interface. Unless you've got a very, very strange config, LAN1 will never see traffic coming into it with a LAN2-subnet source address. Nor will LAN2 ever see traffic coming into it from a LAN1-subnet source address.

They won't hurt anything but they're unnecessary and add clutter to the ruleset.