LAN to LAN traffic rules..

Started by tryllz, May 19, 2020, 09:21:14 AM

Previous topic - Next topic
May 19, 2020, 09:21:14 AM Last Edit: May 19, 2020, 09:23:27 AM by tryllz
Hi,

I'm new to using firewalls (I'm using OPNSense 20.1 in VMware Workstation), and would like to know what all I need to configure to get the following result.

This is an all-LAN setup no internet access

I have 4 networks.

Infrastructure - 192.168.10.0/24
HostsA - 192.168.20.0/24
HostsB - 192.168.30.0/24
iSCSI - 192.168.40.0/24

I need to be able to communicate between all devices in all the LANs.

This is what i know, I have to configure the interfaces on the firewall as the gateways for devices in each LAN. For example:

Devices in infrastructure have the gateway as 192.168.10.1 and so on for other infrastructures.

I also learned that I need to have rules, thus for my scenario can I know what rules do I need to have in place. I'm not concerned about LAN security, I just need LAN-to-LAN communication.

Also do I need NAT and routing configuration for all-LAN traffic, sorry confused about this.

Thanks.

May 19, 2020, 01:10:23 PM #1 Last Edit: May 19, 2020, 01:12:52 PM by Maurice
If you don't need any filtering, you could simply disable the firewall (in Firewall / Settings / Advanced). This will also disable NAT (which you don't need). No manual routing configuration is required.
OPNsense virtual machine images
OPNsense aarch64 firmware repository

Commercial support & engineering available. PM for details (en / de).

May 19, 2020, 04:38:07 PM #2 Last Edit: May 19, 2020, 04:43:28 PM by tryllz
Quote from: Maurice on May 19, 2020, 01:10:23 PM
If you don't need any filtering, you could simply disable the firewall (in Firewall / Settings / Advanced). This will also disable NAT (which you don't need). No manual routing configuration is required.

Thanks Maurice for replying back.

I have done very basic configuration.

Assigned IP addresses to interfaces
em0 - 192.168.10.1 (Infrastructure)
em1 - 192.168.20.1 (hostsA)
em2 - 192.168.20.1 (hostsB)
em3 - 192.168.20.1 (iSCSI)

I created Gateways for each interface with the same IP addresses above.

I disabled firewall as instructed, now the devices can ping its own gateway but cannot ping device in another LAN.

I get Destination Host Unreachable error.

Anything I'm suppose to or not suppose to do.

Thanks a lot.