Cant access devices in Vlan 50

[kayul]

Hi

im new with this networking thing and really need help on how to sort out the problem with our network setup

we have this two devices and been using for more than 10 years without problem

Cisco 1841 Router (under vlan 50 - 10.130.50.4)
Cisco Catalyst 4507R Series 4500 Switch

the cisco 1841 router has failed to work properly after a recent power failure at our place and
for a temporary replacement we have setup a pc with pfsense installed in virtual box with the same ip
as the router.

virtual box setup - Nat, Bridge Adapter
Virtual Box Host adapter - 10.130.50.80/255.255.255.0/10.130.50.3
Pfsense LAN 10.130.50.4
1st pc network adapter - 10.195.50.156/255.255.240.0/10.195.50.10
2nd pc network adapter - 10.130.50.5/255.255.255.0/10.130.50.3

The pfsense is up and running. We can access pfsense from the browsers pc but not in other pc or other vlan

The pc have two network port and both are connected to the same port as the failed router in the core switch
im trying to access the pfsense ip 10.130.50.4 in vlan101 and and vlan 111 but failed. Ping Request Time Out

I can't ping 10.130.50.5 (pc) or 10.130.50.4 (pfsense) and i also cant ping pc in vlan 101 and 111 from vlan 50

[paul driver]

Hello

1st pc network adapter - 10.195.50.156/255.255.240.0/10.195.50.10
2nd pc network adapter - 10.130.50.5/255.255.255.0/10.130.50.3

The above addressing doesnt seem correct --
Old Router lan interface 10.130.50.4/28
Old Router Wan interface 10.195.50.20/23

Switch vlan 50 SVI = 10.130.50.3/28

Lastly the router that failed was perfroming NAT and was running eigrp between the L3 switch however I can see also you were using static routes so the question is does the PFsence have a static summary route pointing towards the switch for the switches vlans.

Pfsence
10.130.0.0 255.255.0.0 10.130.50.3

[kayul]

Hi Thank You Paul,

I change my virtual box setup to this

virtual box setup - Nat, Bridge Adapter
Virtual Box Host adapter - 10.195.50.18/255.255.254.0/10.195.50.10
Pfsense LAN 10.130.50.4

1st pc network adapter - 10.130.50.5/255.255.255.248/10.130.50.3
2nd pc network adapter - 10.195.50.19/255.255.254.0/10.195.50.10

Old Router lan interface 10.130.50.4/29
Old Router Wan interface 10.195.50.20/23

is this correct ?

i added a static summary route in pfsense firewall rules

Pfsence
10.130.0.0 255.255.0.0 10.130.50.3

now i can access pfsense (10.130.50.4) in all my vlan..pfsense is up and running

but i can't ping the pc 10.130.50.5 or 10.195.50.10 in my vlan and also i have no internet in my vlan or pfsense

i am able to browse internet from the virtualbox pc and able to ping 10.195.50.10

any other pointer on how i can fix this ?

what do i need to setup in pfsense in order to get internet to work ?

current pfsense setup

ip wan v4 : 10.195.50.20/23
ip Lan v4: 10.130.50.4/29

this is my old router config 

[Georg Pauwen]

Hello,

what does the NAT firewall rule on the pfSense look like ? Actually, it would be easier to see the entire pfSense config (/conf/config.xml). Can you post that ?

[kayul]

the original natting in my old router is like this

ip nat inside source list GNet interface FastEthernet0/1 overload
!
ip access-list standard GNet
permit 10.130.111.0 0.0.0.255
permit 10.130.50.0 0.0.0.255
permit 10.130.101.0 0.0.0.255

permit 10.195.50.0.0 0.0.1.255

i have made the natting in the pfsense but not really sure if im doing it right..

the default gateway(10.195.50.10) is always display as offline in pfsense

and pfsense and vlan dont have internet

i have change the network setting of virtual box of both adapter to bridged mode but same results

here's my pfsense config.xml

[Georg Pauwen]

Hello,

the outbound NAT rules do not look right. Try to select 'Automatic outbound NAT' which should automatically perform NAT from internal interfaces, such as LAN, to external interfaces, such as WAN.

[kayul]

i've change it to be automatic but the gateway (10.195.50.10) is still offline..and i have no internet in pfsense.. i can browse the internet without problem in my pc by using 10.195.50.10 as gateway

[paul driver]

Hello
So you now need to be able to nat your internal lan subnets from the Psfence box, just like the old router was doing.

As for 10.130.50.5 or 10.195.50.10
10.130.50.5  <--if this is a pc in your lan then make sure it has it any sotfware firewall turned off as by default it negates icmp echo
10.195.50.10 < is the nexthop address of the old router, so you wouldnt be able to ping it from the lan or even maybe the PfSence if the isp has disabled ping

[kayul]

- 10.130.50.5  is where the virtual box (50.4) is installed i cant ping it from my vlan or pfsense..

- 10.195.56.10 is the default gateway

i ve done the natting but not sure if im doing it right..i dont have much experience on networking..

[paul driver]

Hello
Accoding to the Pfsence documnetation Automatic Outbund Nat is the default so I would suggest stay on that setting:

but the gateway (10.195.50.10) is still offline..and i have no internet in pfsense.. i can browse the internet without problem in my pc by using 10.195.50.10 as gateway
So i would say the binding to the Pfsence nic isnt working as it should,Check the speed/duplex setting on the Pfsence nic.

[kayul]

Hi just would like to update,

i adjusted my virtual box setting

1st pc network adapter - 10.195.50.19/255.255.254.0/10.195.50.10
2nd pc network adapter - 10.130.50.5/255.255.255.248/10.130.50.3
virtual box setup - both adapter in bridge mode
Virtual Box Host adapter - 10.130.50.6/255.255.255.248/10.130.50.3
Pfsense LAN 10.130.50.4

i have internet in this pc and i can access pfsense 10.130.50.4 and my core switch 10.130.50.3

the gateway 10.195.50.10 is now online in my pfsense, and i can ping to internet
but 10.130.50.3 (core switch)gateway is offline in pfsense

..i can't ping LAN and now i cant access pfsense in my vlan since the static route i made in pfsense failed
10.130.0.0 255.255.0.0 10.130.50.3

im still trying to solved this, ..bear with me..im new with thing and i really hope i can solve this

[paul driver]

Hello

---

@kayul wrote:

1st pc network adapter - 10.195.50.19/255.255.254.0/10.195.50.10
2nd pc network adapter - 10.130.50.5/255.255.255.248/10.130.50.3
virtual box setup - both adapter in bridge mode
Virtual Box Host adapter - 10.130.50.6/255.255.255.248/10.130.50.3
Pfsense LAN 10.130.50.4

i have internet in this pc and i can access pfsense 10.130.50.4 and my core switch 10.130.50.3

the gateway 10.195.50.10 is now online in my pfsense, and i can ping to internet

If a pc on the lan can access the internet, can can also reach the lan core switch and Pfsence then from a clients point of view all is working.

---

@kayul wrote:

but 10.130.50.3 (core switch)gateway is offline in pfsense

..i can't ping LAN and now i cant access pfsense in my vlan since the static route i made in pfsense failed
10.130.0.0 255.255.0.0 10.130.50.3

---

We know lan core or the Pfsence isn't off line so can you elaborate what you mean regards the above statement, From where are you trying to reach these devices 

Lastly without the static route on the pfsense your clients wont be able reach the internet

[kayul]

I meant i tried in pfsense ping tool, 10.130.50.3 have no response and display as offline in the gateway section,

but i can ping it in the host pc and is definitely up

yes i need 10.128.50.3 to be up in pfsense so the static route will work

i try to draw the the diagram of the network..not sure if i made it right

[paul driver]

Hello

Remove the acl from the lan interface and text your ping again

interface FastEthernet0/0
no ip access-group STOP_PING in