@stephenw10 I'm away for a couple of days, I'll look into it when I get back. Thanks for your help.

@stephenw10
I assume this will either work or it will fail without doing any harm? Well, yeah right I can reset to default again if it fails.

Thanks

@stephenw10 Ah , ok)))

@JustAnotherUser Also, you would have to allow computer 2 & 4's subnets across the WG0 tunnel.

@stephenw10 The original script is in bash, but is fairly simple so should be easily adaptable to tcsh.

I know lots of other folks with similar configurations don't even bother with a watchdog script for wpa_supplicant. This is fine if it works. I rather have something in there that ensures there's network connectivity and the supplicant is not stalled.

@johnpoz

Thank you all for the pointers. Good reminder about the ISPs TOS.

You can set it to solve only A records also
unbound resolver custom options like this

server: do-ip4: yes prefer-ip4: yes do-ip6: no prefer-ip6: no private-address: ::/0 dns64-ignore-aaaa: *.* do-not-query-address: :: do-not-query-address: ::1 do-not-query-address: ::/0

@stephenw10
superb sir you are awesome it works fine thankyou so much sir

@markdudov said in IP not showing:

several active machines and I can access them, but for some reason when I go to DHCP Leases, I don't see any of the IP addresses of these machines.

What could be the reason for not showing up in DHCP Leases?

Two possible reasons :
These devices don't use DHCP, they have a static setup.
If the devices are using DHCP, there must be a another 'roque' DHCP server on your network. Check with the devices from what DHCP server they got their lease.

So its been a while but I got an update. It was Telstra. Which today is still unresolved. The lack of internal dashboard tools for their tech support makes it extremely difficult to identify any issues on their network something as simple as to view the current connected devices MAC address connected to the NTD they have to elevate it to NBNCo.

I switched over to Aussie Broadband and was setup in seconds with no issues. I even have framed Route setup and have a pool of static IP addresses I can use for online services. Not to mention the amount of tools at your disposal on the user dashboard portal.

WOW. I didnt even think about suricata blocking it! Thanks mate

Yes, they are really only of much value in a shared environment like if you are running as a VM or hosting VM in pfSense (don't do that!).

When you tried to ping what error was shown?

@hebein What if you just type

reboot

and hit Enter?

Yup it should give up more if it does fail. It will show more at the console anyway if the script fails.

@stephenw10 It does, so it’s only a annoying inconvinence. I was just trying to gauge how lt would react if I didn’t, and how long it would take.

@markdudov I dont think freeradius on pfSense supports Chapv2 unless its EAP encapsulated.

If you add it via FRR it can:
https://docs.netgate.com/pfsense/en/latest/routing/multipath.html

It might. I can't comment on those devices specifically but many mesh wifi devices only support those features when the main device is in router mode.