*RESOLVED* OPNsense VM - cannot ping ISP gateway

[tdubbed]

Hello, I'm new here, and my networking chops are still being developed... please excuse my ineptitude.

I set up a Proxmox server for my home lab so I can practice configuring firewalls/switches. I have a VM of OPNsense configured, along with an Ububtu VM.

So I have two routers now. My ATT BGW320 and my OPNsense VM. The OPNsense VM is connected to the ATT BGW320, and it has a valid IP address.

My Ubuntu VM has internet, and I can ping my OPNSense VM. The OPNsense VM can also ping the Ubuntu VM.

1) My OPNsense VM cannot ping its own WAN interface (IP address from ATT BGW320) or my home's default gateway (ATT BGW320).

2) I am unable to ping the OPNsense WAN or LAN address, nor can I ping my Ubuntu VM, from devices on my home's LAN.

3) I have created a firewall rule and a static route, but I am missing something.

I want to be careful what information I share, so I'm leery to provide actual private IP addresses. If this is an unfounded fear, please let me know, and I will post more specifics. I am under the impression that I can share any of my private IP configurations with the public. Is this the case?

Thank you!

[Patrick M. Hausen]

What are your OPNsense WAN and LAN address, respectively?

[tdubbed]

LAN (vtnet1) -> v4: 192.168.101.254/24
WAN (vtnet2) -> v4/DHCP4: 192.168.1.127/24

[Patrick M. Hausen]

There's a "block private networks" setting on the WAN interface configuration screen. Remove that check mark.

[tdubbed]

Okay, edit: I broke the Ubuntu VM somehow. I restored it from a snapshot, and now I have Internet.

I AM still able to reach the OPNsense VM through the Ubuntu guest with ping and through the web interface.

I CANNOT ping any host/the gateway on the 192.168.1.x network and vice versa.

Here's an image with some more information. Perhaps you can glean some more from this. I appreciate you!

[tdubbed]

Okay, I'm getting somewhere. I made a WAN firewall rule to allow ICMP. I can now ping the WAN side of my OPNsense VM (my internal ATT DHCP IP address).

Working on pinging the LAN interface...

[tdubbed]

OKAY! Not sure what I did... besides poke, break, restore, break, poke, restore... Anyway, I can ping in all directions!

Thanks for your help, Patrick, and for letting me document for my own benefit!

Until next time...