Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Two network in pfsense

    Scheduled Pinned Locked Moved
    Routing and Multi WAN
    3
    11
    1.5k
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • A
      Abid Zehri
      last edited by

      HI
      Pfsense router
      Wan ::  xxxxxxxxxxxxxx
      Lan:    192.168.0.0  ( in this network active directory server DNS and other server)
      PTI :    192.168.5.0  (all internet user)

      how opti can communicate with lan becouse my DNS and AD is not reachable to this network i can ping to 192.168.5.0 network form 192.168.0.2 but i can not ping or access 192.168.5.0 network

      can any one help me please iam new with pfsense  :(

      thanks in advance

      1 Reply Last reply Reply Quote 0
      • V
        viragomann
        last edited by

        On LAN interface pfSense have a predefined firewall rule, wich allows any incoming traffic to anywhere. If you add additional interfaces you have to set rules for allowed traffic yourself in Firewall > Rules. Have you done this?

        1 Reply Last reply Reply Quote 0
        • V
          viragomann
          last edited by

          @Abid:

          Lan:    192.168.0.0  ( in this network active directory server DNS and other server)
          PTI :    192.168.5.0  (all internet user)

          how opti can communicate with lan becouse my DNS and AD is not reachable to this network i can ping to 192.168.5.0 network form 192.168.0.2 but i can not ping or access 192.168.5.0 network

          Your description is a little bit confusing. Could you tell us what concretely works and what does not.

          And what is lan2 in your rules?
          Please post your interface configuration from Status > Interfaces.

          1 Reply Last reply Reply Quote 0
          • A
            Abid Zehri
            last edited by

            LAN is my pf sense interface and lan2 also my pf sense interface lan ip is 192.168.0.2 and lan2 IP is 192.168.5.4

            some server's like AD and DNS and web application and some user  behind LAN interface and some user of LAN 2 want to access Lan Server's

            Lan2 network can not access the LAN network

            please advise

            1 Reply Last reply Reply Quote 0
            • V
              viragomann
              last edited by

              The setting looks well.

              The rule
              IPv4 TCP/UDP  192.168.5.0/24  *  192.168.0.0/24  *  *  none      Lan to wan
              should allow anything you need for usual AD access, expect ping.
              And you have added this rule to the correct interface (lan2)?

              The PCs on both LANs must have set their pfSense interface IP as default gateway. Is this done?
              PCs in LAN: 192.168.0.2
              LAN2: 192.168.5.4

              To you have access to internet from lan2?

              1 Reply Last reply Reply Quote 0
              • A
                Abid Zehri
                last edited by

                internet working fine but i can not access Lan  Ad and DNS server  \adserver and not even ping the lan network and user over lan2 is not login with ad
                please advise what is the reason

                1 Reply Last reply Reply Quote 0
                • T
                  tim.mcmanus
                  last edited by

                  Okay, please provide screen shots for your LAN rules (both LANs since you have two).

                  If you don't need to block traffic between the LANs, create an ANY/ANY rule between the two.  That rule must be created on each LAN.  This will allow traffic to go between the two.

                  You also indicate that you are running AD.  Is the AD server managing the DHCP scope for both LANs?

                  1 Reply Last reply Reply Quote 0
                  • A
                    Abid Zehri
                    last edited by

                    should i put the LAN gateway on LAN interface and  lan2 gateway in lan2 interface ?
                    it is necessary

                    1 Reply Last reply Reply Quote 0
                    • T
                      tim.mcmanus
                      last edited by

                      Here is what I have set up.  You'll see there is a LAN to LAN2 rule and I have LAN2 going out my WAN2 gateway because I have two WANs.

                      On my LAN you'll see a similar rule to get to LAN2.

                      ![Screen Shot 2015-09-05 at 10.36.07 AM.png](/public/imported_attachments/1/Screen Shot 2015-09-05 at 10.36.07 AM.png)
                      ![Screen Shot 2015-09-05 at 10.36.07 AM.png_thumb](/public/imported_attachments/1/Screen Shot 2015-09-05 at 10.36.07 AM.png_thumb)
                      ![Screen Shot 2015-09-05 at 10.37.28 AM.png](/public/imported_attachments/1/Screen Shot 2015-09-05 at 10.37.28 AM.png)
                      ![Screen Shot 2015-09-05 at 10.37.28 AM.png_thumb](/public/imported_attachments/1/Screen Shot 2015-09-05 at 10.37.28 AM.png_thumb)

                      1 Reply Last reply Reply Quote 0
                      • V
                        viragomann
                        last edited by

                        It's not recommended to allow any to any on both LAN, especially if one of the is a DMZ or a client network. But it' a good approach for testing. Just put this rule on the top of you LAN2 rule set.

                        The TO had rules set up to allow wanted traffic. But he didn't tell us if they are in the right place. A screenshot would give more clarity.

                        @Abid:

                        should i put the LAN gateway on LAN interface and  lan2 gateway in lan2 interface ?
                        it is necessary

                        Since pfSense is the gateway for all your subnets, you must not have setup any gateways for LAN and LAN2.
                        But you have to set the pfSense interface IP as gateway at your PCs.

                        For troubleshooting enable logging of each rule and the default blocks and see what's the causer of your issue in firewall logs.

                        1 Reply Last reply Reply Quote 0
                        • A
                          Abid Zehri
                          last edited by

                          THANKS  FOR YOUR SUPPORT NOW I CAN ACCESS ALL THE NETWORK

                          1 Reply Last reply Reply Quote 0
                          • First post
                            Last post
                          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.