How to I set up pfsense to allow Modem on wan to ping internal interface



  • I have a modem on the WAN which has an internal interface ip address of 192.168.10.1 even though my WAN gets a public IP address.

    Set up is like this:

    |Modem|–-------------------|WAN - PFSENSE|
    Internal IP: 192.168.10.1                    External IP: 24.x.x.x
                                                          Want IP Alias: 192.168.10.2

    I used the alias command, ifconfig vr0 inet 192.168.10.2/24 alias to add an alias to vr0 and I get:
    vr0: flags=8843 <up,broadcast,running,simplex,multicast>mtu 1500
            inet6 fe80::20e:8eff:fe15:900e%vr0 prefixlen 64 scopeid 0x1
            inet 24.x.x.x netmask 0xfffff800 broadcast 255.255.255.255
            inet 192.168.100.2 netmask 0xffffff00 broadcast 192.168.100.255
            ether 00:0e:8e:15:90:0e
            media: Ethernet autoselect (100baseTX <full-duplex>)
            status: active

    I can telnet into the modem, 192.168.10.1:23 and from the diagnostics prompt, i can't ping back 192.168.10.2

    I don't see the packets dropped and using packet capture on pfsense, i'm not able to see icmp requests from the modem side. It may be me...so what am I not doing? I was able to achieve this in linux using ifconfig eth0.0 and some firewall rules to allow communication on the internal network address on the wan.

    Any help is appreciated.</full-duplex></up,broadcast,running,simplex,multicast>



  • You have to add a static route or nat for the alias too!



  • Can you detail the changes I require? Sorry, i'm still learning lots of this platform! Thanks!


Locked