Hello,
device = cisco 2811, as firewall to interner.
We recently set up a pfSense firewall behind our cisco router. We had some trouble routing traffic from behind the pfsense through the cisco router out to the internet.
Internet -- cisco 2811 -- pfsense --internal pfsense private IP
Public IP of cisco, FastEthernet0/1 = 203.40.240.2
private IP of cisco, FastEthernet0/0 = 192.168.1.1/255.255.254.0
External interface of pfSense firewall = 192.168.1.20/255.255.254.0
Private IP of pfSense LAN = 172.16.1.1/255.255.240.0
Private LAN behind 172.16.0.0/255.255.240.0
During our work
- we tried to make a static route to the LAN behind the pfSsense
- also we set up a NAT rule from a Public IP address on FastEthernet0/1 (connected to the internet) to the LAN IP address assigned to the pfSense interface. We then deleted that NAT rule.
The only entries in the cisco config that point the the LAN IP address are for Port forwarding from thr cico public interface to the LAN IP address.
During the process, the arp table on the cisco router shows the IP address of the pfsense interface as having a MAC address of the FastEthernet0/0 interface on the ciaco router, using show arp
Internet 192.168.1.1 - 001d.a2d0.30b8 ARPA FastEthernet0/0
where 001d.a2d0.30b8 = MAC address of the cisco FastETernet0/0 interface.
Thus, we can no longer assign the IP address to the pfsense firewall.
Also, we clearing the arp cache does not remove this entry.
Any help in removing the arp entry would be appreciated.
Adrian
