Please need help with pfsense, work to OPT1, DHCP works static does not.

[Kdes]

Good Day All
Please need help with getting traffic to work from WAN\LAN – OPT1 and please forgive me as I am a complete newbie

I have pfsense setup with 3 adapters, WAN, LAN and OPT1;

WAN is connected to a DSL router and is working fine
LAN is running fine and using DHCP
OPT1 is used for a hikvision camera setup. Static
Both OPT1 and LAN has internet access fine.

The thing I’m struggling with is to get everything to work going to OPT1.

If I setup DHCP server to run on OPT1 then I can get to all machines on the OPT1 network. I can for example, using pfsense ping a PC and ping the hikvison camera NVR.

However if I set OPT1 to be static I can no longer ping the NVR but I can ping the computer.

I have tried using multiple network subnets on OPT1 and also checked a number of times that the static has right IP and gateway on the NVR

EG
OPT1 as DHCP server - PC on DHCP - NVR on DHCP
Result - Can ping the PC and can ping the NVR

OPT1 on Static - PC on Static - NVR on Static
Result - Can ping the PC, but cannot ping the NVR
However can ping the NVR from the PC. Only from pfsense LAN source can't ping the NVR but the PC can ping.

WAN adapter 10.0.0.2 (DSL router 10.0.0.1)
LAN 192.168.1.1 /24
OPT 192.168.2.1 /24
On the firewall i have completely opened for TCP UDP and ICMP for all three adapter.

Please help me understand what im doing wrong

 

[Kdes]

Thought ill add in another way to help explain better.

WAN network 10.0.0.0
LAN network 192.168.1.0/24
OPT1 network 192.168.2.0/24

OPT1 DHCP Server ON (192.168.2.0/24)
NVR gets IP from DHCP (192.168.2.254)
Test Computer is on static IP (192.168.2.106)
Using PFsense for pinging
OPT source ping 192.168.2.106 -> get reply
OPT source ping 192.168.2.254 -> get reply
LAN source ping 192.168.2.106 -> get reply
LAN source ping 192.168.2.254 -> get reply

OPT1 DHCP server is OFF (192.168.2.0/24)
NVR is on static IP (192.168.2.254)
Test Computer is on static IP (192.168.2.106)
Using PFsense for pinging
OPT source ping 192.168.2.106 -> get reply
OPT source ping 192.168.2.254 -> get reply
LAN source ping 192.168.2.106 -> get reply
LAN source ping 192.168.2.254 -> do not get reply
However i can ping the NVR from the Test computer.

Why can i not get to the NVR when OPT1 is not using DHCP and the NVR is set to static?

 

[Kdes]

It happened to be that the NVR has an internal network card and a LAN card. (Two network cards, one for its own use for the IP cams and another for LAN connecting)
The internal network card range was the same LAN range as the LAN range on pfsense causing all sorts of problems.

If you are using hikvision check the internal network range is not the same as any other range on your pfsense box.