Multi LAN single WAN



  • I have the following:

    1. WAN - 172.16.20.10/24
    2. LAN1 - 192.168.3.0/24 (192.168.3.254/24)
    3. LAN2 - 192.168.4.0/24 (192.168.4.254/24)

    WAN working great from both LAN's but i would like "connect" both LAN's as i would like to ping for instance:

    192.168.3.100 to 192.168.4.100 and
    192.168.4.100 to 192.168.3.100

    i used google to find solution but with no luck yet.

    Anyone who can guide me in correct direction?

    Thank you


  • Rebel Alliance Global Moderator

    This should really work out of the box - what are you rules on lan1 and lan2?  Your problem is most likely firewall on 4.100 blocking pings from 3.100, and vice versa



  • Thank you for reply my rules are:

    LAN1:

    Anti-Lockout Rule

    IPv4 * 192.168.3.0/24 * * * * none   ANY

    LAN2:

    IPv4 * 192.168.4.0/24 * * * * none   ANY

    –--------------------------------------------------

    3.100 and 4.100 are both windows 8 laptops, but no luck pinging each other.



  • If you have some kind of antivirus or firewall running on host computers, they would normally block other subnets.



  • So no routing to be set only firewall settings then 2 pc's on different ip ranges should ping each other?



  • I tested firewall disabling and it works.

    Just another question:

    if i want pc's to see both ip ranges without disabling firewalls how would i do it?


  • Netgate

    The PCs can see both ranges but the PC firewall is blocking inbound traffic from other than the local network.  You would have to tell the PC firewall that 192.168.2.0/24 and 192.168.3.0/24 are both to be considered local, trusted networks.  How to do that is outside the scope of pfSense.