PfSense on VMWare, behind router: Cannot ping WAN if



  • Hi,

    I'm trying to setup a test instance of pfSense (1.2 RC4) inside VMWare Server 1.0.3 on XP. I gave the VM 4 NICs:

    le0 -> LAN -> 192.168.1.1
    le1 -> WAN -> 10.1.1.1
    le2 -> OPT1WAN -> 10.1.1.2
    le3 -> OPT2DMZ -> 192.168.100.1

    The idea is a dual WAN setup with a LAN and a DMZ. The physical box (10.1.1.104) is in my physical LAN 10.1.1.0/24, a hardware router (10.1.1.120) dialup ADSL for internet access.

    I have another XP VM with IP address 192.168.1.214, which I use to connect to pfSense's admin GUI without problem. I can ping 192.168.1.214 from pfSense's LAN if, I can also ping WAN if from OPT1WAN if. My router accept ping from 10.1.1.0/24, I can ping it from physical box (10.1.1.104).

    The problem is I cannot ping my router (10.1.1.120) from pfSense's WAN if, nor can I ping pfSense's WAN if from the physical box (10.1.1.104). I have unchecked "Block private networks" in WAN setup, and added a rule to allow any to any on WAN if:

    Proto Source Port Destination Port Gateway Schedule Description   
    *  *  *  *  *  *

    In firewall log (I turned on logging for the rule above), I can see the ping ICMP pass from the physical box to pfSense's WAN:

    Jan 28 16:44:40 WAN 10.1.1.104 10.1.1.1 ICMP

    and using packet capture I can see:

    16:44:40.166767 IP 10.1.1.104 > 10.1.1.1: ICMP echo request, id 1536, seq 2816, length 40

    But there is no reply, and naturally I cannot connect to internet from the 192.168.1.214 VM either.

    Any idea how to debug this problem?

    Thanks



  • Do you bridge the physical interface to the vmWare WAN?



  • If you meant I should set virtual NIC's setting to "Bridged: Connected directly to the physical network", then yes, I have done that for all 4 virtual NIC's. And in Manage Virtual Network, I have assigned my physical NIC to VMnet0.

    PS: I only have one physical NIC, hopefully this is not a problem.


Locked