Can't get pfSense to communicate with Ubiquiti switch

Hardware Hub Networking
1

I have a pfsense firewall that I’ve been trying to setup, the old network had a Ubiquiti switch setup and afaik all of the addresses on that switch are 10.0.0.0/8.

Here’s my configurations:
image

Then I configured a gateway:

image
image1223×954 54 KB

And then setup a static route for all 10 series addresses to go to that interface:

image
image1209×308 26.5 KB

Finally I configured firewall rules to allow LAN to send traffic:

image
image1179×48 7.06 KB

However attempting to ping a known IP always results in timeouts, and a trace shows that it’s dying at the firewall.

Does anyone know what could be going wrong, is there something I’m missing or do I just have no clue what I’m doing?

Thanks

2

You’re trying to reach 10.0.0.0 networks?

PORT2LAN & PORT3SWITCH are 192.168.1.1 and 192.168.2.1 respectively.

3

Ubiquiti switches are Layer 2 switches, meaning the firewall interface, switch, and clients should all be on the same subnet. It looks like you have the firewall configured to use 192.168.2.1, so you should set the switch to be 192.168.2.2 and forget about whatever you are trying to do with 10.0.0.0/8. Or change the firewall interface to 10.0.0.1 and forget about 192.168.2.0/24, whichever you prefer.

Note: if all you are trying to do is access the switch so you can change its address, you should be able just connect a laptop at manually set an IP address on the 10.0.0.0/8 network. If you need to be able to get the switch talking to a Unify controller, then you will probably need to set the firewall interface to 10.0.0.1 temporarily until you make the change.

EDIT: I see some Ubiquity switches are L3, if that is your setup, then change PORT3SWITCH gateway from Dynamic to 192.168.2.1 and make sure the firewall is set to something on the same subnet, like 192.168.2.2. To avoid confusion down the road, I suggest using a local-link address for the link between the switch and firewall, so the firewall might be 169.254.1.1/30 and the switch would be 169.254.1.2/30, then the PFsense gateway would be set to the switch, 169.254.1.2 and you can forward 10.0.0.0/8 traffic to that gateway…again, assuming you have a L3 switch.