How to I set up pfsense to allow Modem on wan to ping internal interface

  • I have a modem on the WAN which has an internal interface ip address of even though my WAN gets a public IP address.

    Set up is like this:

    |Modem|–-------------------|WAN - PFSENSE|
    Internal IP:                    External IP: 24.x.x.x
                                                          Want IP Alias:

    I used the alias command, ifconfig vr0 inet alias to add an alias to vr0 and I get:
    vr0: flags=8843 <up,broadcast,running,simplex,multicast>mtu 1500
            inet6 fe80::20e:8eff:fe15:900e%vr0 prefixlen 64 scopeid 0x1
            inet 24.x.x.x netmask 0xfffff800 broadcast
            inet netmask 0xffffff00 broadcast
            ether 00:0e:8e:15:90:0e
            media: Ethernet autoselect (100baseTX <full-duplex>)
            status: active

    I can telnet into the modem, and from the diagnostics prompt, i can't ping back

    I don't see the packets dropped and using packet capture on pfsense, i'm not able to see icmp requests from the modem side. It may be what am I not doing? I was able to achieve this in linux using ifconfig eth0.0 and some firewall rules to allow communication on the internal network address on the wan.

    Any help is appreciated.</full-duplex></up,broadcast,running,simplex,multicast>

  • You have to add a static route or nat for the alias too!

  • Can you detail the changes I require? Sorry, i'm still learning lots of this platform! Thanks!

Log in to reply