OPNsense Forum

Archive => 20.1 Legacy Series => Topic started by: tryllz on May 19, 2020, 09:21:14 AM

Title: LAN to LAN traffic rules..
Post by: tryllz on May 19, 2020, 09:21:14 AM
Hi,

I'm new to using firewalls (I'm using OPNSense 20.1 in VMware Workstation), and would like to know what all I need to configure to get the following result.

This is an all-LAN setup no internet access

I have 4 networks.

Infrastructure - 192.168.10.0/24
HostsA - 192.168.20.0/24
HostsB - 192.168.30.0/24
iSCSI - 192.168.40.0/24

I need to be able to communicate between all devices in all the LANs.

This is what i know, I have to configure the interfaces on the firewall as the gateways for devices in each LAN. For example:

Devices in infrastructure have the gateway as 192.168.10.1 and so on for other infrastructures.

I also learned that I need to have rules, thus for my scenario can I know what rules do I need to have in place. I'm not concerned about LAN security, I just need LAN-to-LAN communication.

Also do I need NAT and routing configuration for all-LAN traffic, sorry confused about this.

Thanks.
Title: Re: LAN to LAN traffic rules..
Post by: Maurice on May 19, 2020, 01:10:23 PM
If you don't need any filtering, you could simply disable the firewall (in Firewall / Settings / Advanced). This will also disable NAT (which you don't need). No manual routing configuration is required.
Title: Re: LAN to LAN traffic rules..
Post by: tryllz on May 19, 2020, 04:38:07 PM
Quote from: Maurice on May 19, 2020, 01:10:23 PM
If you don't need any filtering, you could simply disable the firewall (in Firewall / Settings / Advanced). This will also disable NAT (which you don't need). No manual routing configuration is required.

Thanks Maurice for replying back.

I have done very basic configuration.

Assigned IP addresses to interfaces
em0 - 192.168.10.1 (Infrastructure)
em1 - 192.168.20.1 (hostsA)
em2 - 192.168.20.1 (hostsB)
em3 - 192.168.20.1 (iSCSI)

I created Gateways for each interface with the same IP addresses above.

I disabled firewall as instructed, now the devices can ping its own gateway but cannot ping device in another LAN.

I get Destination Host Unreachable error.

Anything I'm suppose to or not suppose to do.

Thanks a lot.