Help - rules,routing for 2 Lan setup.

[cygnes]

Hi there, I have a 2 LAN network in our school, Admin (10.75.29.0) and curriculum (10.44.0.0) I ould like the admin network to be able to access shares and printers on the curriculum side. but not curriculum to admin.

 

I'm using PFsence 2.0 RC3, we dont need internet routing since both networks have thier own gateway, all we need it is to act as a bridge between the 2 networks.

 

What basic rules would i need to configure for this ?

 

We just need File and Printer sharing at the moment.

 

 

Kind Regards

 

Paul S

[cygnes]

I just thought i would add this image to help.

 

 

Thanks in advance.

[SYNACK]

What are your internet gateway devices, as you want split default routes you'll probably need to handle the routing in these having a link between them and a static route on each pointing to the other network over this link.

[cygnes]

What are your internet gateway devices, as you want split default routes you'll probably need to handle the routing in these having a link between them and a static route on each pointing to the other network over this link.

 

As far as i'm aware the Gateway device is one appliance.

 

We don't have access to this device as it's not owned by us and is locked away in what looks like a bomb proof cabinet.

 

We feed other local Authority Services aswell, so they don't want IT Tech's messing it up i guess.

 

However thanks for replying to our post.

[SYNACK]

As the equipment is on your site and is already at the right place in the network can you not ask the provider nicely to setup such a link in that hardware for you. It will certainly be the easiest solution as with your network segments being controlled by someone else short of running internal NAT gateways to take control of your IP addressing again it could prove difficult.

 

The only other way I can think of would be to have the pfSence box but not as a default gateway but add in static routes via it on each machine that needed to comunicate between the networks. You could probably do it with a script but is is a rather messy solution.

[kmount]

The only other way I can think of would be to have the pfSence box but not as a default gateway but add in static routes via it on each machine that needed to comunicate between the networks. You could probably do it with a script but is is a rather messy solution.

 

or dhcp could dish them out but I agree on the messiness.