Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Need direct internet access to the servers behind pfsense.

    Scheduled Pinned Locked Moved Firewalling
    4 Posts 3 Posters 646 Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • N
      northumbria2010
      last edited by

      hi there,

      as i am very new to pfsense so like other new-bee i need answer of my problem.
      i configured my pfsense and its working fine only the problem i am facing that i cant get internet access to my freenas server which is on the LAN side and there is another server on the same LAN but for the internet access i need to authenticate through captive portal and then i am able to get internet access which is fine but i need internet access on that server without any authentication.
      for reference i am attaching my network diagram .
      Pfsense.jpg
      Pfsense.jpg_thumb

      1 Reply Last reply Reply Quote 0
      • V
        viragomann
        last edited by

        Enter the two server addresse in Services > Captive portal > > Allowed IP addresses.

        1 Reply Last reply Reply Quote 0
        • N
          northumbria2010
          last edited by

          thanks viragomann for your reply but unfortunately still no joy
          any other suggestion?

          1 Reply Last reply Reply Quote 0
          • johnpozJ
            johnpoz LAYER 8 Global Moderator
            last edited by

            Maybe I am missing something here.. Why do you have it labeled admin and production when they seem to be on the same 10.1.2 network?

            Are you doing layer 3 at the switches?  Simple thing is not run a captive portal on segments where you have servers running that need access to the internet without user intervention to auth.

            So run the captive portal on the segment you have users on, and not run it on the interface you have servers on..  Or as viragomann suggested to put in a passthru for those machines.. It can be mac based, IP based, hostname based if for whatever reason they might change, etc..

            If your using IP to allow them through without auth and its not working, your doing it wrong or have the wrong IP.. Post up your captive portal config and your passthru method your using.  But again.. Why even run the captive portal on your server vlan/segment?

            edit:  Wait "i cant get internet access to my freenas server"  You want access from the public internet (WAN) to access your server..  That would be done with a port forward.. But then that server needs to auth through the captive portal as well..  Unless its on its own segment that doesn't do captive portal.

            capport.png
            capport.png_thumb

            An intelligent man is sometimes forced to be drunk to spend time with his fools
            If you get confused: Listen to the Music Play
            Please don't Chat/PM me for help, unless mod related
            SG-4860 24.11 | Lab VMs 2.7.2, 24.11

            1 Reply Last reply Reply Quote 0
            • First post
              Last post
            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.