Help needed, LAN to LAN communication getting silently dropped? and more

[Beehive-guy]

Hello, I am new to OPNsense and configuring more advanced routers/firewalls, I recently decided to install OPNsense on a mini PC to use it as a router/firewall for my home network

I have seen similar posts to this one on the forums, but the rule suggestions didn't fix my problem

I have my server on LAN2 I want my desktop to be able to ping the server from LAN, and ultimately allow my desktop to get access to some services my server exposes on different ports

I have attached the full firewall rules page of LAN and LAN2 as well as their interface configurations, Also I have DHCP setup, I can provide screenshots or more information concerning that if needed

See below current behavior:

Ping from diagnostics under interfaces in the OPNsense web GUI successfully pings 192.168.1.20 (Linux desktop) and 192.168.2.25 (Linux server) with 0% packet loss
also shows up in the live view as:
192.168.1.1 -> 192.168.1.20 pass

192.168.2.1 -> 192.168.2.25 pass

From my desktop:
192.168.1.20 -> 192.168.2.25 pass by firewall but 100% packet loss

192.168.1.20 -> 192.168.1.1 and 192.168.2.1 doesn't show up in the live view of the firewall but 0% packet loss

From my server:
192.168.2.25 -> 192.168.1.20 doesn't show up in the live view + 100% packet loss

192.168.2.25 -> 192.168.2.1 doesn't show up in the live view but 0% packet loss

192.168.1.25 -> 192.168.1.1 doesn't show up in the live view + 100% packet loss

Some more info:
When my server and desktop are on the same LAN/VLAN they can ping each other, earlier I also tried to make LAN to VLAN communication work but that also failed, as well as VLAN to VLAN communication.

No floating or WAN rules are set, I believe that I left the rest of the firewall configuration to the defaults
running OPNsense 26.1.6

Any help would be greatly appreciated!

[viragomann]

I presume, your clients and servers have internet access?

Consider that the devices might run their own firewalls, which usually blocks access from outside of their subnets. If so you need to configure them properly to permit access from the respective other subnet.

[nero355]

I have my server on LAN2 I want my desktop to be able to ping the server from LAN, and ultimately allow my desktop to get access to some services my server exposes on different ports

I have attached the full firewall rules page of LAN and LAN2 as well as their interface configurations

When you install OPNsense the Default LAN has Firewall Rules that ALLOW traffic to ANY destination.

If you then create your LAN2 correctly as the next step, you could then copy that firewall rule from LAN to LAN2 and have two networks that can talk to each other.

There is no need for seperate ICMP Firewall Rules at all :)


The above ofcourse excludes things like the Windows built-in Firewall or IPtables/NFtables/UFW/etc. on Linux Servers/Clients !!

[meyergru]

I assume you want to set up a bridge with LAN and LAN2. Follow the Offizials docs, them it will work.