how to access a web server in a second LAN?

Started by bongo, October 28, 2020, 08:20:56 AM

Previous topic - Next topic
besides the WAN interface, i have 2 LANs, configured
LAN1: 192.168.1.0
LAN2: 10.1.1.0

the interfaces of the OPNSense are:
LAN1: 192.168.1.100
LAN2: 10.1.1.100

i have a webserver 192.168.1.211 running in LAN1.
besides all clients in LAN1, also one client from LAN2 (10.1.1.130) should have access to the webserver.

so far, i was not able to configure this.

what i tried:

define a rule in LAN2 firewall settings
source: 10.1.1.130:any to destination: 192.168.1.211:80
when accessing 192.168.1.211 from a browser on 10.1.1.130, i can see that OPNSense follows the appropriate rule, but i get no webpage back.

i also tried to set up port forwarding on the firewall.
i tried to define that 10.1.1.100:8001 is forwarded to 192.68.1.211:80
and then accessed 10.1.1.100:8001 from the client 10.1.1.130
i also added the rule in the LAN2 settings to allow tcp access from 10.1.1.130:any to 10.1.1.100:8001
so far, with no success too.

with my former firewall solution, this has been done using source nat. i just defined that port 8001 on the firewall is forwarded to 192.168.1.211:80 and everything was working fine.

how can this be done using OPNSense?

PLEASE HELP!!!

thank you very much!