Messages

I added a static route:
Network-Address: the public IP from the other opnsense
Gateway: Wan Gateway (The Gateway from the modem)

Solved it by adding a static route on the wan gateway to the modem-gateway. I don`t understand it completely, but anyways...

The modem is a Hitron CGNV4. I don´t think the modem is the problem here, cause we have an other router (Lancom) on one of the public IPs which we can ping from both of the opnsenses.

@chemlud we added the ping-rules on both OPNsenses. So we can ping the OPNsenses from an other network, but not from networks on the same modem

Maybe it makes sense to do an other explanation of the problem.

I can connect to the webservers on the networks from any destination.

When I go out from a Network to the other one on the same modem then the request is like that:

Network 1 (example1.com) tries to reach Network 2 (example2.com) --> So from the router the IP from Network 2 is send to the Gateway on the modem, and that should route it to Network 1. And it seems like it does, cause the traffic is visible on both firewall logs. But actually you cant reach the websites, or ping the other router.

@haljimmy Yes of course we added the rules. We can access the to routers from every destination, except from devices on the same modem.

We already tried to disable the block rules you mentioned, even though that wouldn`t make sense either, cause if that would be the problem, then the firewall would log the blocked packages.

When trying to access the opnsenses from each other, we use a public IP, cause they both have public IPs. Any other device we connected has also a public IP.

@chemlud Maybe I didn´t explain the issue well enough... I can`t even reach the other router by ping, so how could I establish a VPN-connection?

We added four public IPs to our connection. Before that we just had one.
We wanted to build a separated network on one of the new public IPs with it's own opnsense. So we connected an other OPNSense to the modem. Now we have 2 OPNSense on the same modem, each with its own public IP.
Everything works fine but we can't reach the OPNsenses from each other, as well as we can't reach any of the OPNSenses from any other device, directly connected to the modem.
In both firewall logs you can see that the request is received and allowed, but websites and pings are not reachable. We tried to solve this for days now and we don´t have any idea what could be the problem...
Can someone please help us with this?