Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    How to I set up pfsense to allow Modem on wan to ping internal interface

    Scheduled Pinned Locked Moved Firewalling
    3 Posts 2 Posters 3.9k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • G
      GoldServe
      last edited by

      I have a modem on the WAN which has an internal interface ip address of 192.168.10.1 even though my WAN gets a public IP address.

      Set up is like this:

      |Modem|–-------------------|WAN - PFSENSE|
      Internal IP: 192.168.10.1                    External IP: 24.x.x.x
                                                            Want IP Alias: 192.168.10.2

      I used the alias command, ifconfig vr0 inet 192.168.10.2/24 alias to add an alias to vr0 and I get:
      vr0: flags=8843 <up,broadcast,running,simplex,multicast>mtu 1500
              inet6 fe80::20e:8eff:fe15:900e%vr0 prefixlen 64 scopeid 0x1
              inet 24.x.x.x netmask 0xfffff800 broadcast 255.255.255.255
              inet 192.168.100.2 netmask 0xffffff00 broadcast 192.168.100.255
              ether 00:0e:8e:15:90:0e
              media: Ethernet autoselect (100baseTX <full-duplex>)
              status: active

      I can telnet into the modem, 192.168.10.1:23 and from the diagnostics prompt, i can't ping back 192.168.10.2

      I don't see the packets dropped and using packet capture on pfsense, i'm not able to see icmp requests from the modem side. It may be me...so what am I not doing? I was able to achieve this in linux using ifconfig eth0.0 and some firewall rules to allow communication on the internal network address on the wan.

      Any help is appreciated.</full-duplex></up,broadcast,running,simplex,multicast>

      1 Reply Last reply Reply Quote 0
      • E
        eri--
        last edited by

        You have to add a static route or nat for the alias too!

        1 Reply Last reply Reply Quote 0
        • G
          GoldServe
          last edited by

          Can you detail the changes I require? Sorry, i'm still learning lots of this platform! Thanks!

          1 Reply Last reply Reply Quote 0
          • First post
            Last post
          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.