Hello ITPro.TV crew and members. I've spent an entire week trying to resolve this issue with no luck.
Short version:
All inbound traffic that starts on the router is not going to any of the PFSense subnets unless it was started by an IP on PFSense box.
Strange thing is this worked once before. Yes, I have internet connectivity.
For ease of troubleshooting I have allowed "ANY"(ports, IP, source, and destination) across all ports via the Firewall.
Firewall logs don't show anything being blocked (logging turned on for all rejected packets,each interface, and rule)
All IPs are static except the WAN. NAT is set to dynamic. "Block private networks and loopback addresses" is unchecked across all interfaces.
Any help is greatly appreciated and willing to answer any questions.
Long Version (detials):
I have a Netgear(C7000-100NAS) router that's connected via WAN to the WAN port of my PFSense box. The router I'm assuming doesn't know what IPs are behind the WAN connection.
Router:
192.168.0.0/24 (Subnet)
192.168.0.1 (Gateway)
192.168.0.12 (WAN ---> PFSense WAN port)
192.168.0.13 (Cellphone)
PFSense Ports:
192.168.0.12 (PFSense WAN port ---> WAN Router port)
10.10.2.1 (NAS Gateway) ---> FreeNAS(10.10.2.2)
192.168.1.1 (LAN/PFSense IP)---> 192.168.1.2(PC)
I CAN:
- Ping ANY IP listed under "Router" from NAS OS
- Ping ANY IP listed under "Router" from NAS Gateway (10.10.2.1) using PFSense ping tool.
- All devices physically connected to PFSense can all ping eachother:
I CANNOT:
- Any IP that resides on the router (the 192.168.0.0/24 network) is not able to ping any of the other subnets/ports on PFSense box.
- Using traceroute it will only go one hop (the default gateway of the router) and it doesn't know where the next hop is located.