Home
Help
Search
Login
Register
OPNsense Forum
»
English Forums
»
24.1 Legacy Series
»
Second router behind OPNSense without SNAT, return traffic being blocked
« previous
next »
Print
Pages: [
1
]
Author
Topic: Second router behind OPNSense without SNAT, return traffic being blocked (Read 363 times)
lp0101
Newbie
Posts: 1
Karma: 0
Second router behind OPNSense without SNAT, return traffic being blocked
«
on:
February 12, 2024, 07:42:08 pm »
I have a second router inside my opnsense LAN without SNAT. I want to allow bi-directional communication between the two networks without losing source IP address.
My OPNSense IP range is 192.168.10.0/24. My second router's IP is 192.168.10.131. The networks handled by my second router is 100.64.0.0/10. The second router has a gateway set up within opnsense, plus a static route for all traffic going to 100.64.0.0/10 to be routed to that gateway.
I can communicate just fine going from opnsense to 100.x.x.x IP. However, I can't communicate the other way. Looking at the logs, I see that requests are being caught by the default deny rule. Here is a screenshot of the logs:
https://i.imgur.com/8fuXLmb.png
. This occurs when I try to access 192.168.10.140 from 10.81.208.115, so it looks like the return traffic is being blocked by the firewall.
I've tried adding a floating rule to pass requests between the networks, but no luck. Any advice here would be appreciated.
Edit: Fixed by enabling `Bypass firewall rules for traffic on the same interface`
«
Last Edit: February 12, 2024, 08:11:51 pm by lp0101
»
Logged
Print
Pages: [
1
]
« previous
next »
OPNsense Forum
»
English Forums
»
24.1 Legacy Series
»
Second router behind OPNSense without SNAT, return traffic being blocked