Hi all, I feel like I should be able to figure this one out on my own, but I'm hitting a wall.
I've got OpenWRT running in a virtual box on an old Mac Pro server with 2 physical ethernet ports. One port is acting as the WAN port and is connected to my ISP's fiber line. The other port is connected to a Unifi nanoHD AP. The virtual machine has 3 virtual ports. The first two are bridged adapters which allow it directly access the two physical ports on the host machine. The third is a host-only network adapter, connected to the host machine. See the diagram below for addresses and interface names. The host is setup with a static address, and OpenWRT is providing DHCP for the 10.0.1/24 network. The
mng interfaces (see network config below) are both in the
lan firewall zone, which has forwarding turned on.
config interface 'loopback' option ifname 'lo' option proto 'static' option ipaddr '127.0.0.1' option netmask '255.0.0.0' config interface 'mng' option ifname 'eth2' option proto 'static' option netmask '255.255.255.0' option ipaddr '10.0.2.1' config interface 'lan' option proto 'static' option ifname 'eth0' option ipaddr '10.0.1.1' option netmask '255.255.255.0' config interface 'wan' option proto 'dhcp' option ifname 'eth1'
- All devices can connect to the public internet (can ping 22.214.171.124)
- All devices on either local subnet can ping all router interfaces
- Devices on the 10.0.1/24 subnet can ping each other
- OpenWRT can ping all devices on either subnet
What doesn't work
- Devices on either local subnet can't ping devices on the other local subnet
- 10.0.2.2 (Mac Pro host) can't ping 10.0.1.2 (Unifi AP) or 10.0.1.150 (Wireless client)
- 10.0.1.150 (Wireless client) can't ping 10.0.2.2 (Mac Pro host)
I'd think by default that OpenWRT would route requests between the two subnets. It's not a firewall issue, because I can turn the firewall off and the issue persists. What am I missing? (I'd appreciate explanations along with solutions.)