next »

[leadZERO]

First, my setup:

WAN: vr0
LAN bridge0
Internal: vr1
wifi: ath0

bridge0: x.x.x.1

bridge0 members: ath0, vr1

DHCP is serving up addresses from the x.x.x network and I'm using NAT for Internet access.

Everything is working correctly except that hosts on wifi can't connect to hosts on vr1.  But, Wifi hosts are able to connect to the internet through the x.x.x.1 gateway just fine.  And, hosts on the wired LAN can connect just fine.  So it's almost like the bridge is half working... It's passing packets between the member interfaces and the assigned IP, but not between member interfaces...

Ideas?

[rcampbell]

I created a floating rule to permit the interfaces to talk to each other within the bridge (OPT3 in my case)

Floating rule:
Action=pass - Quick=Unchecked - Interface = LAN,OPT1,OPT2,OPT3 - Direction=any - Protocol=Any - Source=OPT3 Subnet - Destination=OPT3 Subnet

Does anyone know of a way for the interfaces within a bridge to inherently trust each other without the need to create the above specific rule?

[rcampbell]

I found this walkthrough too...

http://blog.qcsitter.com/BSDay/index.php?/archives/2-Bridging-the-pfSense-2.x-wireless-divide.html