Transitioning to OPNsense. Hoping for temp usage of 2 firewalls on same LAN

[hwitten]

My current setup is PublicIP182-->Cyberoam-->192.168.2.0/24 (CyberoamIP .251)

I have a new PublicIP50-->OPNsense-->hopefully also to 192.168.2.0/24 (OpnsenseIP .1)
DHCP server is OFF for OPNsense as the Cyberoam has it ON)

Webserver is on 192.168.2.6 and works correctly, with PublicIP182 and the Cyberoam.

What I was hoping is that I could ease myself into OPNsense by getting web access with PublicIP50, by port forwarding to 192.168.2.6 as well.

I get a "connection timed out" error.

Am I trying the impossible?

[bartjsmit]

Pretty much  :D

Your web server needs to return packets to the client. Since these are all on the internet, it needs to use a default route which can only point to one firewall.

You can test your PublicIP50 connection by temporarily changing your web server's default gateway, which will obviously make it unavailable on your PublicIP182 side.

If you need to do more testing than your outage window allows, consider setting up a separate test server which is equivalent to your main server but has a different internal IP and DG.

Bart...

[hwitten]

Thank you Bart.