Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Internet works on the LAN but not broadcasted on switch

    Scheduled Pinned Locked Moved General pfSense Questions
    2 Posts 2 Posters 721 Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • S
      Su30MKI
      last edited by

      I had to change the leased line in my office as we procured new static IP. The internet works on the LAN as I checked by connecting it directly to the LAN port of Pfsense. But the internet is not broadcasted through the L3 switch to the other switches.

      1 Reply Last reply Reply Quote 0
      • johnpozJ
        johnpoz LAYER 8 Global Moderator
        last edited by

        "through the L3 switch"

        So you have downstream networks from pfsense..  Does pfsense know how to get to those networks?  Have you setup nat so pfsense nats those networks, do the firewall rules allow for those other networks.  Normally when you have a downstream L3 switch doing routing you would connect that to your edge or wan router with a transit network.

        While you might have your downstream router pointing to pfsense as its default gateway, how does pfsense know how to get to those downstream networks??  You either need to create routes to them or run a routing protocol so pfsense learns how to get to them.  This sort of setup can also lead to asynchronous routing issues depending how everything is connected..

        If for example you have a device in the 192.168.1.0/24 network using pfsense as gateway..  And he wants to talk to IP say in the 10 network, his gateway is pfsense, pfsense sends it to your L3 switch that routes it to the 10 hanging off it.. But when the 10 devices talks back the L3 switch says oh I have that 192.168.1 directly connected and just sends the traffic direct to client on that network.  So you have a asynchronous route - not good.  This is why downstream is normally connected via a transit so you don't run into that problem.

        Why don't you post a diagram and your network and we can work out where your problem is..

        downstreamnetworks.png
        downstreamnetworks.png_thumb

        An intelligent man is sometimes forced to be drunk to spend time with his fools
        If you get confused: Listen to the Music Play
        Please don't Chat/PM me for help, unless mod related
        SG-4860 24.11 | Lab VMs 2.7.2, 24.11

        1 Reply Last reply Reply Quote 0
        • First post
          Last post
        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.