# Can't ping IP through RED interface

**URL:** <https://community.ipfire.org/t/cant-ping-ip-through-red-interface/10258>\
**Category:** Network\
**Created:** [27 August 2023 20:10 UTC](https://community.ipfire.org/t/cant-ping-ip-through-red-interface/10258 "2023-08-27T20:10:39Z")\
**Posts on this page:** 8\
**Page:** 1

<div class="post-metadata">

**Author:** ![hexit78](https://community.ipfire.org/user_avatar/community.ipfire.org/hexit78/32/9837_2.png) [@hexit78](https://community.ipfire.org/u/hexit78)\
**Post date:** [27 August 2023 20:10 UTC](https://community.ipfire.org/t/cant-ping-ip-through-red-interface/10258/1 "2023-08-27T20:10:39Z")

</div>

Hi,

I have several server running on my XigmaNAS VirtualBox.  
My home network look like:  
Router 10.0.0.1  
XigmaNAS 10.0.0.100

My XigmaNAS hardware  
INTEL X79 INTEL (INTEL Xeon E5/Corei7 DMI2 - C600/C200 Cipset)  
CPU 16cores 2700MHz  
RAM 64gig

I have install IPFire last version 2.27(178) and test an older version 2.25(158).

My virtual setup is simple:  
RAM 4096MB  
CPU 2cores  
Network adapter 1 - NAT Card 82540EM  
Network adapter 2 - Bridged Adapter 82540EM

In IPFire, my RED is on adapter 1 and GREEN on adapter 2.  
RED  
On network adapter 1  
DHCP IP 10.0.2.15 Gateway 10.0.2.2 DNS 10.0.0.1  
GREEN  
On network adapter 2  
Static IP 192.168.0.1

From my computer with IP 192.168.0.3 i can access the web gui ([https://192.168.0.1:444](https://192.168.0.1:444)) without problem.

 ![image](https://community.ipfire.org/uploads/default/original/2X/7/75c27f5912e3c2c6150b9d61e62eaec288595237.png)

From the CLI i can ping on the following IP without problem:  
10.0.2.15 RED  
10.0.2.2 GATEWAY  
192.168.0.1 GREEN  
192.168.0.3 Another computer in this subnet  
I can’t ping on the following IP (No response):  
10.0.0.1 Local DNS  
1.1.1.1 Cloudflare DNS  
8.8.8.8 Google DNS  
8.8.4.4 Google DNS

I got the same result with both version of IPFire 2.27(178) and 2.25(158).

I have no problem with my others virtuals guests with network in NAT or Bridge mode.

---

<div class="post-metadata">

**Author:** ![hexit78](https://community.ipfire.org/user_avatar/community.ipfire.org/hexit78/32/9837_2.png) [@hexit78](https://community.ipfire.org/u/hexit78)\
**Post date:** [27 August 2023 20:32 UTC](https://community.ipfire.org/t/cant-ping-ip-through-red-interface/10258/2 "2023-08-27T20:32:54Z")

</div>

I change the DNS queries for TLS so i can navigate on internet in the browser of this computer(192.168.0.3) but if I ping from the CLI of IPFire or the cli of this computer i got time out.

 ![image](https://community.ipfire.org/uploads/default/original/2X/9/940526f45fc0b56c887d4f900bce26ceff0116df.jpeg)

---

<div class="post-metadata">

**Author:** ![cfusco](https://community.ipfire.org/user_avatar/community.ipfire.org/cfusco/32/9213_2.png) [@cfusco](https://community.ipfire.org/u/cfusco)\
**Post date:** [27 August 2023 21:13 UTC](https://community.ipfire.org/t/cant-ping-ip-through-red-interface/10258/3 "2023-08-27T21:13:23Z")

</div>

Welcome to the IPFire community.

To assist with your issue, it would be helpful to see the contents of both your ARP and Routing Tables. You can find these in the Web User Interface (WUI) under `/Status/Network (others)`. Could you please share them?

Based on your configuration, it appears that your router at 10.0.0.1 might not be forwarding outgoing traffic properly, or XigmaNAS cannot route traffic properly between the IPFire virtual machine and the router.

Is this a correct representation of your network?

```plaintext
                    +---------------------+
                    | Router |
                    | 10.0.0.1 |
                    +---------+-----------+
                              |
                              |
                              |
                    +---------+-----------+
                    | XigmaNAS |
                    | 10.0.0.100 |
                    +---------+-----------+
                              |
                              | Virtual Network
                              |
                    +---------+-----------+
                    | IPFire VM |
                    | RED 10.0.2.15 (NAT)|
                    | GREEN 192.168.0.1 |
                    +---------+-----------+
                              |
                              |
                              |
                    +---------+-----------+
                    | User's Computer |
                    | 192.168.0.3 |
                    +---------------------+

```

Edit: if you bridge also the RED interface (instead of having a NAT), what happens?

---

<div class="post-metadata">

**Author:** ![tphz](https://community.ipfire.org/user_avatar/community.ipfire.org/tphz/32/16551_2.png) [@tphz](https://community.ipfire.org/u/tphz)\
**Post date:** [27 August 2023 22:19 UTC](https://community.ipfire.org/t/cant-ping-ip-through-red-interface/10258/4 "2023-08-27T22:19:28Z")

</div>

> [@cfusco](#):
>
> or XigmaNAS cannot route traffic properly between the IPFire virtual machine and the router

As @cfusco wrote  
you need to check XigmaNAS firewall logs

BR

---

<div class="post-metadata">

**Author:** ![bbitsch](https://community.ipfire.org/user_avatar/community.ipfire.org/bbitsch/32/7420_2.png) [@bbitsch](https://community.ipfire.org/u/bbitsch)\
**Post date:** [27 August 2023 22:24 UTC](https://community.ipfire.org/t/cant-ping-ip-through-red-interface/10258/5 "2023-08-27T22:24:00Z")

</div>

Another important information to help are the concrete network definitions:

- router network 10.0.0.0/x
- XigmaNAS network(s) 10.0.2.0/y
- IPFire red 10.0.2.0/y
- IPFire green 192.168.0.0/z

z is 24, right?

How does the XigmaNAS route to the VMs?  
Where is 10.0.2.2, the gateway?

EDIT: Maybe the answers can be guessed from your description. But experience shows, that a nearly complete question is part of the solution.

---

<div class="post-metadata">

**Author:** ![tphz](https://community.ipfire.org/user_avatar/community.ipfire.org/tphz/32/16551_2.png) [@tphz](https://community.ipfire.org/u/tphz)\
**Post date:** [27 August 2023 22:46 UTC](https://community.ipfire.org/t/cant-ping-ip-through-red-interface/10258/6 "2023-08-27T22:46:00Z")

</div>

Just for hint about 10.0.2.2  
[https://www.virtualbox.org/manual/ch06.html#network\_nat](https://www.virtualbox.org/manual/ch06.html#network_nat)

---

<div class="post-metadata">

**Author:** ![hexit78](https://community.ipfire.org/user_avatar/community.ipfire.org/hexit78/32/9837_2.png) [@hexit78](https://community.ipfire.org/u/hexit78)\
**Post date:** [28 August 2023 05:03 UTC](https://community.ipfire.org/t/cant-ping-ip-through-red-interface/10258/7 "2023-08-28T05:03:45Z")

</div>

Hi, thank you for your support.  
Switching from NAT to Bridge for my RED interface work and i can ping all ip on RED now.  
I can let it in Bridge mode, NAT mode seem broken on my NAS, i will check it at a later time.

If I change the DNS queries for UDP i got broken again… did using TLS can cause a problems?  
 ![image](https://community.ipfire.org/uploads/default/original/2X/5/58e025def6ceedd85adf13f1e1d56ea35ce6ac66.png)

---

<div class="post-metadata">

**Author:** ![hexit78](https://community.ipfire.org/user_avatar/community.ipfire.org/hexit78/32/9837_2.png) [@hexit78](https://community.ipfire.org/u/hexit78)\
**Post date:** [28 August 2023 05:17 UTC](https://community.ipfire.org/t/cant-ping-ip-through-red-interface/10258/8 "2023-08-28T05:17:42Z")

</div>

Yes z is 24

The 10.0.2.2 gateway is the ip of the virtualbox NAT internal gateway.

I found the error in the Virtualbox log.  
 ![image](https://community.ipfire.org/uploads/default/original/2X/c/cee0d9e24611c4e65937ff6576a755d8cedd84b9.png)

I keep it for a later time.

Thank you
