[SOLVED] Routing between local LAN and WiFi issue

[lpwevers]

Hi,

I'm trying to setup access from my LAN to my WiFi, but I seem to have issues in getting it to work the way I want. First let me explain my setup. I have OPNsense running on dedicated hardware. WiFi is handled by a Linksys Velop Mesh solution. This has it's own separate network, though it's wired connection uses the OPNsense box to get it's internet connection.

My LAN is in the IP range 172.16.0.0/24, WiFi is 10.1.0.0/24. On OPNsense I've configured a wireless interface (OPT3) using infrastructure mode and put it in the WiFi network. It's IP address is 10.1.0.10. The Velop router has 10.1.0.1 and the device I need to reach from my LAN has 10.1.0.123.

If I login to the shell of OPNsense I can ping both my Velop and the actual device I need to reach in the end. However, if I check from a client that has only a LAN interface I can ping the Velop router, but not the 10.1.0.123 host.

In the OPNsense firewall rules I've created a rule for the LAN interface that allows all traffic from 'LAN net' to 'OPT3 net' and for OPT3 I've created the rule the other way round.

I'm probably overlooking something here, but I just can't seem to pinpoint what I'm missing. If it were possible to attach a WiFi module to the final client that would also solve it, but that seems to be impossible.

I'm running OPNsense 22.7_4-amd64.

If anyone can point me in the right direction that would be greatly appreciated.

[lpwevers]

Ok, never mind. I feel so stupid. But maybe writing down the issue made me realize something. Since I could ping the Velop router, but not the internal network, it came to me that the OPNsense firewall is configured correctly.

Apparently the Velop router has some own internal firewall that blocks this kind of traffic. Disabling it solved my issue.