Unable to route between internal net and external

Hey guys,

I’ve went over other posts in the forum and have been spinning my wheels no this since last night.

So, I have ESXi running a homelab im standing up.

Home Router is at 192.168.1.254
eth0 192.168.1.159/24
eth1 10.0.1.1/24

DC1 is at 192.168.1.9

Other servers at:
192.168.1.11
192.168.1.12
192.168.1.13
192.168.1.14

Windows Client at 10.0.1.5

My Windows Client at 10.0.1.5 can ping all my servers, eth0 and eth1 as well as get out to the internet. However it cannot ping any of my LAN devices outside of me ESXi lab which reside on the 192.168.1.0/24 network.

Additionally, my servers inside the lab at 192.168.1.9 - 192.168.1.14 cannot ping my internal Windows Client at 10.0.1.5.

Why is this? Full config below.

interfaces {
ethernet eth0 {
address dhcp
description OUTSIDE
duplex auto
hw-id 00:0c:29:d9:1d:21
smp_affinity auto
speed auto
}
ethernet eth1 {
address 10.0.1.1/24
description INSIDE
duplex auto
hw-id 00:0c:29:d9:1d:2b
smp_affinity auto
speed auto
}
loopback lo {
}
}
nat {
source {
rule 100 {
outbound-interface eth0
source {
address 10.0.1.0/24
}
translation {
address masquerade
}
}
}
}
protocols {
static {
}
}
service {
dhcp-server {
disabled false
shared-network-name LAN {
authoritative disable
subnet 10.0.1.0/24 {
default-router 10.0.1.1
dns-server 10.0.1.1
domain-name tlabinternal.net
lease 86400

S>* 0.0.0.0/0 [210/0] via 192.168.1.254, eth0
C>* 10.0.1.0/24 is directly connected, eth1
C>* 127.0.0.0/8 is directly connected, lo
C>* 192.168.1.0/24 is directly connected, eth0

I made this way more complicated on myself than I needed to.

It was was Windows firewall :joy:

4 Likes

We’ve all been bitten by this once before - at least I know I have!
Glad you got it sorted out and welcome to the Vyos forums!

3 Likes

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.