I have the following network: - Edge Lite 3 router with public IP on WAN (eth0) and 2 LANs: 1) eth1 192.168.1.11/24 2) eth2 192.168.2.11/24
eth1 is DHCP, I have several work laptops inside.
eth2 goes to a pfSense firewall with ip 192.168.2.1 (on its WAN interface)
I have NAT rules for several ports I need, from WAN to 192.168.2.1.
The LAN ip of pfSense the IP is 192.168.100.1/24
Behind it I have a web/dc/sql server (192.168.100.2), a NAS (192.168.100.3), another DC (192.168.100.4) and we continue to add as we separate and scale the roles.
pfSense has NAT rules from WAN to the web server 192.168.100.2 (we we are in the double NAT scenario).
The website works with no issues, being accessible from the internet.
The 2 LAN interfaces eth1 and eth2 of the Edge router should be independent, we don't want to be able to directly access eth2 from eth1 laptops.
What we need is to access the website from the machines in eth1. Currently we have the error 404 not found in browsers.
nslookup shows server unknown with address 192.168.1.11, and for the non-authoritative address, the correct name and public ip.
tracert for the website name has one step, the public ip.
How can we do for the requests from eth1 (workstations in DHCP) to be treated by pfSense like any other requests from the internet?