help to configure opnsense networks

[sdnavarro]

Hello

I have a Firewall with two different networks

I have configured the WIFI and WAN interface as a transparent bridge (10.1.0.0), and I need to see a computer from that network as shown in the image.



how can I configure the opnsense so that I see the ip 192.168.1.7

thanks

[MickeyRat]

I'm a noob to much of this but, what you need is a bridge.  The following may help.
https://wiki.opnsense.org/manual/how-tos/lan_bridge.html

[sdnavarro]

I already have a WAN and WIFI bridge, I need to see from the network 10.0.0.1 the ip 192.168.1.7

thanks

[Ciprian]

Hi!
Where is 10.0. on your schematic? I only see 10.1. (/16 - so 10.0 is not there).

[sdnavarro]

I'm wrong this ip 10.1.0.1  ::)

I already have a WAN and WIFI bridge, I need to see from the network 10.1.0.1 the ip 192.168.1.7

thanks

[bartjsmit]

192.168.0.0/16 and 10.1.0.0/16 are different subnets. You need a router, not a bridge.

Since OPNsense is a router out of the box, your first point of call should be correct (static) routes for the two endpoints. I.e. does your LDAP server know that it needs to take 192.168.1.19 to get to the 10.1.0.0/16 subnet?

I suspect that the hosts on the 192.168.0.0/16 subnet have OPNsense as their default gateway, and OPNsense knows where 192.168.0.0/16 lives, since it has an interface on it.

Check the routes both ways, and do some ping tests with simultaneous packet captures.

Bart...

[Ciprian]

192.168.0.0/16 and 10.1.0.0/16 are different subnets. You need a router, not a bridge.

Since OPNsense is a router out of the box, your first point of call should be correct (static) routes for the two endpoints. I.e. does your LDAP server know that it needs to take 192.168.1.19 to get to the 10.1.0.0/16 subnet?

I suspect that the hosts on the 192.168.0.0/16 subnet have OPNsense as their default gateway, and OPNsense knows where 192.168.0.0/16 lives, since it has an interface on it.

Check the routes both ways, and do some ping tests with simultaneous packet captures.

Bart...

Very nice explanation and recommendation, Bart, my applause for you! :)