vlibran Posted April 28, 2015 Posted April 28, 2015 Hi there I have this setup Layer 3 Cisco with 3 vlan Vlan 1 172.17.10.1 Vlan 2 172.17.20.1 Vlan 3 172.17.30.1 route 0.0.0.0 0.0.0.0 172.17.10.250 to the PFsense Box that runs in a Vmware Dell server Vmware ip 172.17.10.10 all Devices are able to ping internally even the VM Box. But only devices in vlan 1 can only ping PFsense and view the internet PLEASE any help
psydii Posted April 28, 2015 Posted April 28, 2015 What are the subnet masks for each of the vlans? What is the IP for each of default gateway for each of the vlans? Are the default gateways configured for devices on each vlan the pfsense or the Cisco Switch (given the stated layer 3 nature of the switch, I would expect the default gateway for each subnet in each vlan to be the switch's interface in that vlan) Does the Layer 3 switch have IP forwarding enabled? Does the layer 3 switch have the internal interface of the pfsense set to be its default gateway? Does the pfsense box have and internal and external interface? Does the pfsense box have a default gateway set to be the ip of your external router? (and only your external router - multiple default gateways via the GUI will not work) Does the pfsense box have a route configured for each of your internal subnets?
vlibran Posted April 28, 2015 Author Posted April 28, 2015 (edited) What are the subnet masks for each of the vlans? /24 What is the IP for each of default gateway for each of the vlans? Vlan 1 172.17.10.1 Vlan 2 172.17.20.1 Vlan 3 172.17.30.1 Are the default gateways configured for devices on each vlan the pfsense or the Cisco Switch (given the stated layer 3 nature of the switch, I would expect the default gateway for each subnet in each vlan to be the switch's interface in that vlan) yes Does the Layer 3 switch have IP forwarding enabled? Yes 0.0.0.0 0.0.0.0 172.17.10.250 Does the layer 3 switch have the internal interface of the pfsense set to be its default gateway? yes Does the pfsense box have and internal and external interface? yes Does the pfsense box have a default gateway set to be the ip of your external router? (and only your external router - multiple default gateways via the GUI will not work) ?? Does the pfsense box have a route configured for each of your internal subnets? I try this http://doc.pfsense.org/multiple-subnets-one-interface-pfsense.pdf but my PFsense would not work after this. Is there a different method? Edited April 28, 2015 by vlibran
psydii Posted April 28, 2015 Posted April 28, 2015 That document is probably the source of the problem then. I'd roll back those settings. The way we have it is that there are two interfaces on the pfsense LAN and WAN. Only the WAN interface has an IPV4 upstream gateway configured. On the routing page (System->Routing) There is a Default Gateway referenced on the WAN interface. We have a second Gateway configured on the LAN interface with the IP set to be the VLAN interface of the core switch (which in your case would be 172.17.10.1) On the routes tab we have configured a supernet (Supernetwork - Wikipedia, the free encyclopedia) which in your case would be 172.17.0.0/19. In this configuration the pfsense box forwards all traffic for LAN IPs to the Layer 3 switch and everything else it sends out to the default gateway (the internet). Hope this helps
vlibran Posted April 28, 2015 Author Posted April 28, 2015 First of all thaks This is getting me closer not getting fired. With your instructions I able to ping all vlans from PFsence (did not work before) but I cant still ping Pfsens from devices in Vlan 2 and 3 only from vlan 1
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now