The pfSense Store

Author Topic: Masquerading from LAN to OPT1  (Read 2305 times)

0 Members and 1 Guest are viewing this topic.

Offline decibel83

  • Jr. Member
  • **
  • Posts: 83
  • Karma: +0/-0
    • View Profile
Masquerading from LAN to OPT1
« on: March 08, 2006, 04:55:59 am »
Hi!
What about if I wish to have masquerading from the LAN interface to the OPT1 interface?
I have a Soekris net4501 system with 3 network interfaces.
The first network is the LAN, the second one is the WAN and the third one is another network (OPT1) which the LAN clients needs to connect to.
I can reach the WAN from the LAN, but I can't reach any host on the OPT1 from any LAN client.

The OPT1 has 172.18.67.252/24 as IP address, and I can ping an host (for example 172.18.67.254) from the m0n0wall web interface.
From a LAN client which is using m0n0wall as default gateway I can ping the OPT1 IP address (172.18.67.252) but I can't ping the 172.18.67.254 host.
No log is shown on the firewall logs.

Could you help me to found the problem?

Thank you very much!
Goodbye

Offline hoba

  • Administrator
  • Hero Member
  • *****
  • Posts: 5837
  • Karma: +3/-0
  • What was the problem to this solution again?
    • View Profile
    • pfSense
Re: Masquerading from LAN to OPT1
« Reply #1 on: March 08, 2006, 10:13:52 am »
First, this is pfSense and not m0n0wall  :P
Second, I assume the clients at OPT are using another default gateway that doesn't have a route back to your LAN subnet vie the pfSenses OPT IP. Masquerading would fix that but could cause other trouble on the other hand. Adding a route at the OPT's clients default gateway would be the "cleaner" solution imo. If you reall wan't to NAT enable advanced outbound NAT at Firewall>NAT and add a mapping for LAN to OPT with OPT IP of the pfSense there.