What am I missing?

Networking & Firewalls
1

I have 3 buildings each with their own IP Add scheme.

(10.24.0.0/16 Building 1 L3 Switch)
VLAN 1 (Management) - 172.17.24.1/24
VLAN 100 (Data) - 10.24.0.1/16 <<<<<---- Default Gateway for all computers in this building
VLAN 255 (Core) - 172.16.1.24/24 <<<<<---- fiber connection to the main L3 switch
ip route 0.0.0.0 0.0.0.0 172.16.1.100

(10.28.0.0/16 Building 2 L3 switch Switch)
VLAN 1 (Management) - 172.17.28.1/24
VLAN 100 (Data) - 10. 28.0.1/16 <<<<---- Default gateway for all computers in this building
VLAN 255 (Core) - 172.16.1.28/24 <<<<<----- fiber connection to main L3 switch
ip route 0.0.0.0 0.0.0.0 172.16.1.100

(10.100.0.0/16 Main L3 Switch that is connected to the pfSense box)
VLAN 1 (Management) - 172.17.100.1/24
VLAN 100 (Data) - 10.100.10.3/16 <<<----- Default gateway for all computers in this building
VLAN 255 (Core) - 172.16.1.100/24 <<<<— fiber connection from both other L3 switches
ip route 0.0.0.0 0.0.0.0 10.100.10.1 <<<----- pfsense lan port/ip address

Everything connects fine through the Barracuda box I’m trying to replace. But, when I replace the Barracuda box with the pfsense box (which has the same LAN IP Address as the Barracuda), only the 10.100.0.0/16 network can get on the internet… neither of the other two buildings can get to the internet…

I’m sure it is something simple. LOL

2

Do you have rules in pfsense to allow the traffic out?

3

Under Firewall>Rules>LAN, I have IPv4* and IPV6* Source=LANnet SourcePort=any Destination=any DestinationPort=any

the 10.100 network can get the internet just fine…

the 10.28 and the 10.24, however cannot…

I’m stumped

4

I’m seeing this in the log… It looks like those networks are being blocked… how do I unblock them?

Feb 20 10:14:07 LAN Default deny rule IPv4 (1000000103) 10.28.15.166:55969 52.167.17.97:443 TCP:S
Feb 20 10:14:07 LAN Default deny rule IPv4 (1000000103) 10.28.13.202:58661 52.109.8.21:443 TCP:S
Feb 20 10:14:07 LAN Default deny rule IPv4 (1000000103) 10.24.13.98 8.8.8.8 ICMP
Feb 20 10:14:07 LAN Default deny rule IPv4 (1000000103) 10.28.14.141:38784 108.177.122.147:80 TCP:S
Feb 20 10:14:07 LAN Default deny rule IPv4 (1000000103) 10.24.14.151:46961 13.248.156.50:443 TCP:S
Feb 20 10:14:07 LAN Default deny rule IPv4 (1000000103) 10.28.13.189:38154 52.88.190.205:443 TCP:S
Feb 20 10:14:07 LAN Default deny rule IPv4 (1000000103) 10.28.14.141:39880 108.177.122.105:443 TCP:S
Feb 20 10:14:07 LAN Default deny rule IPv4 (1000000103) 10.24.14.91:61494 20.190.154.19:443 TCP:S
Feb 20 10:14:07 LAN Default deny rule IPv4 (1000000103) 10.28.16.60:53181 17.188.142.160:443 TCP:S
Feb 20 10:14:07 LAN Default deny rule IPv4 (1000000103) 10.28.16.147:52209 108.177.122.100:443 TCP:S
5

Got it working.

I had to go under System>Routing>Gateways and created a LAN Gateway for the 10.100.10.3 device

After that, I went to System>Routing>Static Routes and created 2 static routes… one for the 10.28.0.0/16 and one for the 10.24.0.0/16, setting both of them to sue the 10.100.10.3 LANGateway I created above…

Then bam!!! all 3 networks, 10.100.0.0, 10.28.0.0, 10.24.0.0 can get on the internet… Now to move on to port forwarding.

Hopefully this helps someone in my situation

1 Like