Inter-vlan routing not working

[rt050]

Hi all,

I have a just upgraded a site to Opnsense from pfSense which was initally successful apart from one strange issue that's baffling me which I'm struggling to solve. It should be simple but my usual method isn't working.

So I have a few vlans, mostly public WiFi however I have the CCTV cameras on a separate subnet and I wish to access this from the LAN so I can modify the cameras if I need to (server based CCTV software).

So all I need is one way traffic from LAN > CCTV to basically access the camera's GUI.

So I have a rule, which normally worked in the past would go like this:

Action: Pass
Quick: Selected
Interface: LAN
Direction: In
TCP Version: IPv4
Source: LAN net
Destination: CCTV net

So I tried the reverse from the CCTV subnet which worked as expected and I could ping from CCTV subnet:

Action: Pass
Quick: Selected
Interface: LAN
Direction: In
TCP Version: IPv4
Source: CCTV net
Destination: LAN net

There are only two rules on CCTV subnet which is DNS and NTP.

LAN rules are simple too with the above rule at the top of the table.

Only floating rules for DNS as using WAN failover. Anybody know what could be causing this? I feel stupid as it's simple stuff.

[rt050]

Just tried one last thing, I remember having some issues accessing ESXi once after a Opnsense upgrade which turned out to be an incorrect gateway.

I connected a laptop directly to the VLAN and had a look at what was set on the cameras... They were set to 10.1.1.1 and my CCTV gateway is 10.1.1.5.

I tried changing the one camera and I can now access the gui.

Stupid me, apologies.