Hepl with 1wan 2 lan



  • hello i have 2 gateways, the default one goes to internet, and the other goes to a remote network office, the configuration is attached
    the problem is that i cant make my 2 lans to get connected, even from my lan i cant reach the remote lan gateway, and from my pfsense box i cant reach the remote router and the only firewall is this pfsense box,
    for example:
    i got this machine: ip 10.10.4.76/16 GW 10.10.1.120
    when i ping the CFG lan interface i got nothing, so the CFGGW too
    i think its becouse the netmask, so i do route add 10.10.6.0/24 10.10.1.120 and i can ping the CFG interface
    but when i do:
    ping 10.10.6.9
    PING 10.10.6.9 (10.10.6.9) 56(84) bytes of data.
    From 10.10.1.120 icmp_seq=6 Destination Host Unreachable
    thats the result.
    tip: from the lans routers i can reach each other normally
    what i can do to fix this?
    thanks














  • sorry i miss this info too:
    from my pc with route added
    (traceroute to the local router)
    traceroute 10.10.6.1
    traceroute to 10.10.6.1 (10.10.6.1), 30 hops max, 60 byte packets
    1  10.10.1.120 (10.10.1.120)  0.368 ms  0.352 ms  0.342 ms
    2  10.10.6.1 (10.10.6.1)  1.050 ms  1.229 ms  1.401 ms

    (traceroute to the remote router)
    traceroute 10.10.6.9
    traceroute to 10.10.6.9 (10.10.6.9), 30 hops max, 60 byte packets
    1  10.10.1.120 (10.10.1.120)  0.265 ms  0.230 ms  0.342 ms
    2  * * *
    3  * * *
    4  * * *
    5  * * *
    6  * * *
    7  * * *
    8  * * *
    9  * * *


  • LAYER 8 Netgate

    Figure out your subnetting.

    10.10.6.4 is also in 10.10.1.120/16.



  • yes it is
    and i know that's the problem
    i can split my lan into subnets like 10.10.1.0/24, 10.10.2.0/24…. i use from 10.10.1 to 10.10.5.
    the thing is to not to do the spliting thing
    i wanna know if this is possible, and how to do it.


  • LAYER 8 Netgate

    You can't have two interfaces on conflicting subnets.  If you want to supernet, say, 10.10.0.0/16 and ROUTE THAT to another router that takes the networks and subnets it to interfaces like 10.10.1.0/24, 10.10.2.0/24, etc, you can do that but you can't assign the /16 to an interface.



  • 10.10.0.0/16 its my lan prefix so if i add interfaces to my pfsense box to cover all the ranges of may lan (lets say 10.10.1.0-10.10.5.255) with prefix /24 then i can route the remote lan (10.10.6.0)?
    sorry i'm not quite understand u, i have ever do that
    thansk for answering


  • LAYER 8 Netgate

    You cannot do that.  You need to understand basic IP subnetting.  Many, many sources for this information are already out there.

    Get rid of the /16 or, for the other networks, use a prefix other than 10.10.



  • thanks for the tip
    so, if i reduce my /16 to /22 then the 10.10.6… subnet gets out of my lan net so every request to that network will be managed by the gateway, its like that?


  • LAYER 8 Netgate



  • thanx im reading the articles
    as u can see i have changed some rules (marked in yellow)

    now adding a route in my pc i can reach the remote network
    but from inside pfsense i can't (im missing something)
    i'll will lplay with rules in order to reach the remote network from inside pfsense, when i achieve this i'll post it

    and when i end studying the supernetting thing i will change my lan mask and let u know how it works
    thanks 4 all



  • LAYER 8 Netgate

    Your problem is more than just rules, it's interface addresses and subnets.


Log in to reply