Basic routing help needed on WRAP.2C hardware


  • Using WRAP 2C with 1 lan and 2 wan interfaces.
    I simply want it to route IP traffic where it logically should go.
    1. Turned off NAT via  System -> Advanced -> Disable Firewall
    2. OPT1 interface is local 2.4ghz wi-fi with DHCP on.
    3. WAN interface is for communication between pfSense units (backhaul).

    DSL modem 10.0.0.1/8
                                      |

    LAN 10.0.0.2/24
                                        | 
    wi-fi clients                    |
        2.4ghz OPT1–------pfsense #1
        10.2.0.1/24            |
                                        | 
                    10.1.0.1/16  WAN -----5.8ghz wireless ----------|
                                                                                            |       
                                                                                            |
                                                                                            |
                                LAN 10.0.1.1/24                                    | (will try to put OLSR on WAN in the future)       
                                        |                                                    |
        2.4ghz OPT1--------pfsense #2                                    |
          10.2.1.1/24            |                                                  |
                                        |                                                  |
                      10.1.0.2/16  WAN-----5.8ghz wireless ----------|---(etc)

    As of now, I'm trying to get pfSense#1 routing between the local wi-fi clients on OPT1 and the DSL modem on LAN.
    Pings that work so far:
    "dsl modem"<-->"pfSense#1 lan and opt1"
    "wi-fi client"-->"pfSense#1 opt1", however "pfSense#1" cannot ping wi-fi client.
    No Pings between dsl modem and wi-fi client.
    What do I set the Gateways to on each of the interfaces?
    When I enable OLSR on the WAN 5.8ghz ports, the path to the Internet could be anywhere, should I then set gateways to the WAN/OLSR interface ip?
    Any suggestions are appreciated,
    -pc


  • Your DSL-Modem needs a static route back to the subnet of the wificlients with the pfsense as gateway or you have to use nat for your wificlients.


  • If I turn NAT back on and keep the same IP ranges, I'm guessing I would need to set something up in the NAT translation 1:1?


  • Create an outbound Nat rule for the wifi subnet that only applies for the destination of the modemrouter. (firewall>nat, outbound tab)

    LAN    10.2.0.1/24  *  19.0.0.1/32  *  *  *  NO


  • @hoba:

    …or you have to use nat for your wificlients.

    I hope to avoid using NAT unless absolutely necessary.

    @hoba:

    Your DSL-Modem needs a static route back to the subnet of the wificlients with the pfsense as gateway…

    I guess that means routing to 10.2.0.1.  However, what about the wifi clients on pfSense#2 in ip range 10.2.1/24 ?
    Thank you for the assistance,
    -pc


  • You only were referring to the wifi clients accessing the dsl modem in your previous posts. Actually a lot a whole bunch of routes is needed at pfsense1, pfsense2 and the DSL modem if the Modem should be accessable from everywhere.