How can I configure pfSense to allow traffic from LAN to WAN?
My topology is as the picture above.
I've configure to allow incoming traffic into each pfSense interface, include 3 LAN and 1 WAN.
Ex: I can ping from DC to pfSense interface in the same network.
I used default Manual Outbound NAT rule generation but still can't ping from inside network to outside and receive this message "PING: transmit failed. General failure."
Help me fixing this please.
networking firewall lan wan pfsense
edited Oct 23 '16 at 14:50
Journeyman Geek♦
112k43216366
asked Oct 22 '16 at 12:31
Nguyen Khanh
6112
bumped to the homepage by Community♦ 2 days ago
This question has answers that may be good or bad; the system has marked it active so that they can be reviewed.
add a comment |
My topology is as the picture above.
I've configure to allow incoming traffic into each pfSense interface, include 3 LAN and 1 WAN.
Ex: I can ping from DC to pfSense interface in the same network.
I used default Manual Outbound NAT rule generation but still can't ping from inside network to outside and receive this message "PING: transmit failed. General failure."
Help me fixing this please.
networking firewall lan wan pfsense
edited Oct 23 '16 at 14:50
Journeyman Geek♦
112k43216366
asked Oct 22 '16 at 12:31
Nguyen Khanh
6112
bumped to the homepage by Community♦ 2 days ago
This question has answers that may be good or bad; the system has marked it active so that they can be reviewed.
add a comment |
My topology is as the picture above.
I've configure to allow incoming traffic into each pfSense interface, include 3 LAN and 1 WAN.
Ex: I can ping from DC to pfSense interface in the same network.
I used default Manual Outbound NAT rule generation but still can't ping from inside network to outside and receive this message "PING: transmit failed. General failure."
Help me fixing this please.
networking firewall lan wan pfsense
edited Oct 23 '16 at 14:50
Journeyman Geek♦
112k43216366
asked Oct 22 '16 at 12:31
Nguyen Khanh
6112
My topology is as the picture above.
I've configure to allow incoming traffic into each pfSense interface, include 3 LAN and 1 WAN.
Ex: I can ping from DC to pfSense interface in the same network.
I used default Manual Outbound NAT rule generation but still can't ping from inside network to outside and receive this message "PING: transmit failed. General failure."
Help me fixing this please.
networking firewall lan wan pfsense
networking firewall lan wan pfsense
edited Oct 23 '16 at 14:50
Journeyman Geek♦
112k43216366
asked Oct 22 '16 at 12:31
Nguyen Khanh
6112
edited Oct 23 '16 at 14:50
Journeyman Geek♦
112k43216366
asked Oct 22 '16 at 12:31
Nguyen Khanh
6112
edited Oct 23 '16 at 14:50
Journeyman Geek♦
112k43216366
edited Oct 23 '16 at 14:50
Journeyman Geek♦
112k43216366
edited Oct 23 '16 at 14:50
Journeyman Geek♦
112k43216366
112k43216366
asked Oct 22 '16 at 12:31
Nguyen Khanh
6112
asked Oct 22 '16 at 12:31
Nguyen Khanh
6112
asked Oct 22 '16 at 12:31
Nguyen Khanh
6112
6112
bumped to the homepage by Community♦ 2 days ago
This question has answers that may be good or bad; the system has marked it active so that they can be reviewed.
bumped to the homepage by Community♦ 2 days ago
This question has answers that may be good or bad; the system has marked it active so that they can be reviewed.
add a comment |
add a comment |
1 Answer
1
active
oldest
votes
Okay, by default the first LAN connection should be able to ping from the LAN to WAN (Outbound rules) but the rest of the LAN interfaces do not have rules automatically created: You will need to add rules under Firewall > Rules > [LAN*] and Firewall > NAT > Outbound.
Clarifying the LAN rules again, you will need a rule to say certain traffic is allowed in and out.
I do not know exactly what you have configured - IP address wise - from your original post.
If you require further assistance, could you send a screen-shot of the above tabs.
I hope the above helps.
Kind regards,
Andre Morton
answered Oct 22 '16 at 15:56
A. Morton
413
This is detailed topology with IP address:
– Nguyen Khanh
Oct 23 '16 at 13:21
Sorry, this is detailed topology with IP address: imgur.com/a/dOWqz Sorry if it's hard to see. The default LAN network is 192.168.1.0, as you said, it should be able to ping to WAN. But it can't, this is the result: imgur.com/fERsTfM Configuration for each interface: imgur.com/zhXgVCv Thank's for your help.
– Nguyen Khanh
Oct 23 '16 at 13:29
Can you also send a screen shot of the Firewall > Rules > [LAN*] tab please. The other settings look correct.
– A. Morton
Oct 23 '16 at 15:50
Also, have you unchecked the 'Block private networks' check box under Interfaces > WAN? As this blocks all private RFC1918 addresses: 192.168.*.* 10.*.*.* 172.16.*.*
– A. Morton
Oct 23 '16 at 15:56
1
Sorry, I fixed this haha, I forgot to add default gateway in each machine.
– Nguyen Khanh
Oct 24 '16 at 14:06
|
show 7 more comments
Your Answer
StackExchange.ready(function() {
var channelOptions = {
tags: "".split(" "),
id: "3"
};
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function() {
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled) {
StackExchange.using("snippets", function() {
createEditor();
});
}
else {
createEditor();
}
});
function createEditor() {
StackExchange.prepareEditor({
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader: {
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
},
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
});
}
});
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fsuperuser.com%2fquestions%2f1137753%2fhow-can-i-configure-pfsense-to-allow-traffic-from-lan-to-wan%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
1 Answer
1
active
oldest
votes
1 Answer
1
active
oldest
votes
active
oldest
votes
active
oldest
votes
Okay, by default the first LAN connection should be able to ping from the LAN to WAN (Outbound rules) but the rest of the LAN interfaces do not have rules automatically created: You will need to add rules under Firewall > Rules > [LAN*] and Firewall > NAT > Outbound.
Clarifying the LAN rules again, you will need a rule to say certain traffic is allowed in and out.
I do not know exactly what you have configured - IP address wise - from your original post.
If you require further assistance, could you send a screen-shot of the above tabs.
I hope the above helps.
Kind regards,
Andre Morton
answered Oct 22 '16 at 15:56
A. Morton
413
This is detailed topology with IP address:
– Nguyen Khanh
Oct 23 '16 at 13:21
Sorry, this is detailed topology with IP address: imgur.com/a/dOWqz Sorry if it's hard to see. The default LAN network is 192.168.1.0, as you said, it should be able to ping to WAN. But it can't, this is the result: imgur.com/fERsTfM Configuration for each interface: imgur.com/zhXgVCv Thank's for your help.
– Nguyen Khanh
Oct 23 '16 at 13:29
Can you also send a screen shot of the Firewall > Rules > [LAN*] tab please. The other settings look correct.
– A. Morton
Oct 23 '16 at 15:50
Also, have you unchecked the 'Block private networks' check box under Interfaces > WAN? As this blocks all private RFC1918 addresses: 192.168.*.* 10.*.*.* 172.16.*.*
– A. Morton
Oct 23 '16 at 15:56
1
Sorry, I fixed this haha, I forgot to add default gateway in each machine.
– Nguyen Khanh
Oct 24 '16 at 14:06
|
show 7 more comments
Okay, by default the first LAN connection should be able to ping from the LAN to WAN (Outbound rules) but the rest of the LAN interfaces do not have rules automatically created: You will need to add rules under Firewall > Rules > [LAN*] and Firewall > NAT > Outbound.
Clarifying the LAN rules again, you will need a rule to say certain traffic is allowed in and out.
I do not know exactly what you have configured - IP address wise - from your original post.
If you require further assistance, could you send a screen-shot of the above tabs.
I hope the above helps.
Kind regards,
Andre Morton
answered Oct 22 '16 at 15:56
A. Morton
413
This is detailed topology with IP address:
– Nguyen Khanh
Oct 23 '16 at 13:21
Sorry, this is detailed topology with IP address: imgur.com/a/dOWqz Sorry if it's hard to see. The default LAN network is 192.168.1.0, as you said, it should be able to ping to WAN. But it can't, this is the result: imgur.com/fERsTfM Configuration for each interface: imgur.com/zhXgVCv Thank's for your help.
– Nguyen Khanh
Oct 23 '16 at 13:29
Can you also send a screen shot of the Firewall > Rules > [LAN*] tab please. The other settings look correct.
– A. Morton
Oct 23 '16 at 15:50
Also, have you unchecked the 'Block private networks' check box under Interfaces > WAN? As this blocks all private RFC1918 addresses: 192.168.*.* 10.*.*.* 172.16.*.*
– A. Morton
Oct 23 '16 at 15:56
1
Sorry, I fixed this haha, I forgot to add default gateway in each machine.
– Nguyen Khanh
Oct 24 '16 at 14:06
|
show 7 more comments
Okay, by default the first LAN connection should be able to ping from the LAN to WAN (Outbound rules) but the rest of the LAN interfaces do not have rules automatically created: You will need to add rules under Firewall > Rules > [LAN*] and Firewall > NAT > Outbound.
Clarifying the LAN rules again, you will need a rule to say certain traffic is allowed in and out.
I do not know exactly what you have configured - IP address wise - from your original post.
If you require further assistance, could you send a screen-shot of the above tabs.
I hope the above helps.
Kind regards,
Andre Morton
answered Oct 22 '16 at 15:56
A. Morton
413
Okay, by default the first LAN connection should be able to ping from the LAN to WAN (Outbound rules) but the rest of the LAN interfaces do not have rules automatically created: You will need to add rules under Firewall > Rules > [LAN*] and Firewall > NAT > Outbound.
Clarifying the LAN rules again, you will need a rule to say certain traffic is allowed in and out.
I do not know exactly what you have configured - IP address wise - from your original post.
If you require further assistance, could you send a screen-shot of the above tabs.
I hope the above helps.
Kind regards,
Andre Morton
answered Oct 22 '16 at 15:56
A. Morton
413
edited Oct 22 '16 at 16:08
answered Oct 22 '16 at 15:56
A. Morton
413
answered Oct 22 '16 at 15:56
A. Morton
413
answered Oct 22 '16 at 15:56
A. Morton
413
413
This is detailed topology with IP address:
– Nguyen Khanh
Oct 23 '16 at 13:21
Sorry, this is detailed topology with IP address: imgur.com/a/dOWqz Sorry if it's hard to see. The default LAN network is 192.168.1.0, as you said, it should be able to ping to WAN. But it can't, this is the result: imgur.com/fERsTfM Configuration for each interface: imgur.com/zhXgVCv Thank's for your help.
– Nguyen Khanh
Oct 23 '16 at 13:29
Can you also send a screen shot of the Firewall > Rules > [LAN*] tab please. The other settings look correct.
– A. Morton
Oct 23 '16 at 15:50
Also, have you unchecked the 'Block private networks' check box under Interfaces > WAN? As this blocks all private RFC1918 addresses: 192.168.*.* 10.*.*.* 172.16.*.*
– A. Morton
Oct 23 '16 at 15:56
1
Sorry, I fixed this haha, I forgot to add default gateway in each machine.
– Nguyen Khanh
Oct 24 '16 at 14:06
|
show 7 more comments
This is detailed topology with IP address:
– Nguyen Khanh
Oct 23 '16 at 13:21
Sorry, this is detailed topology with IP address: imgur.com/a/dOWqz Sorry if it's hard to see. The default LAN network is 192.168.1.0, as you said, it should be able to ping to WAN. But it can't, this is the result: imgur.com/fERsTfM Configuration for each interface: imgur.com/zhXgVCv Thank's for your help.
– Nguyen Khanh
Oct 23 '16 at 13:29
Can you also send a screen shot of the Firewall > Rules > [LAN*] tab please. The other settings look correct.
– A. Morton
Oct 23 '16 at 15:50
Also, have you unchecked the 'Block private networks' check box under Interfaces > WAN? As this blocks all private RFC1918 addresses: 192.168.*.* 10.*.*.* 172.16.*.*
– A. Morton
Oct 23 '16 at 15:56
1
Sorry, I fixed this haha, I forgot to add default gateway in each machine.
– Nguyen Khanh
Oct 24 '16 at 14:06
This is detailed topology with IP address:
– Nguyen Khanh
Oct 23 '16 at 13:21
This is detailed topology with IP address:
– Nguyen Khanh
Oct 23 '16 at 13:21
Sorry, this is detailed topology with IP address: imgur.com/a/dOWqz Sorry if it's hard to see. The default LAN network is 192.168.1.0, as you said, it should be able to ping to WAN. But it can't, this is the result: imgur.com/fERsTfM Configuration for each interface: imgur.com/zhXgVCv Thank's for your help.
– Nguyen Khanh
Oct 23 '16 at 13:29
Sorry, this is detailed topology with IP address: imgur.com/a/dOWqz Sorry if it's hard to see. The default LAN network is 192.168.1.0, as you said, it should be able to ping to WAN. But it can't, this is the result: imgur.com/fERsTfM Configuration for each interface: imgur.com/zhXgVCv Thank's for your help.
– Nguyen Khanh
Oct 23 '16 at 13:29
Can you also send a screen shot of the Firewall > Rules > [LAN*] tab please. The other settings look correct.
– A. Morton
Oct 23 '16 at 15:50
Can you also send a screen shot of the Firewall > Rules > [LAN*] tab please. The other settings look correct.
– A. Morton
Oct 23 '16 at 15:50
Also, have you unchecked the 'Block private networks' check box under Interfaces > WAN? As this blocks all private RFC1918 addresses: 192.168.*.* 10.*.*.* 172.16.*.*
– A. Morton
Oct 23 '16 at 15:56
Also, have you unchecked the 'Block private networks' check box under Interfaces > WAN? As this blocks all private RFC1918 addresses: 192.168.*.* 10.*.*.* 172.16.*.*
– A. Morton
Oct 23 '16 at 15:56
1
1
Sorry, I fixed this haha, I forgot to add default gateway in each machine.
– Nguyen Khanh
Oct 24 '16 at 14:06
Sorry, I fixed this haha, I forgot to add default gateway in each machine.
– Nguyen Khanh
Oct 24 '16 at 14:06
|
show 7 more comments
Thanks for contributing an answer to Super User!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Some of your past answers have not been well-received, and you're in danger of being blocked from answering.
Please pay close attention to the following guidance:
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fsuperuser.com%2fquestions%2f1137753%2fhow-can-i-configure-pfsense-to-allow-traffic-from-lan-to-wan%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
