• Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login
Netgate Discussion Forum
  • Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login

pfsense, web server and VLAN's

General pfSense Questions
web server static ip vlan switch
4
42
8.2k
Loading More Posts
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • R
    Rockyuk @stephenw10
    last edited by Apr 11, 2022, 10:55 PM

    @stephenw10 Ok, I am getting offline and 100% packet loss on my Gateway.

    No traffic is getting through to Web Server either, I thought it might have been my software firewall on web server CSF. I disabled it and still nothing!

    J 1 Reply Last reply Apr 11, 2022, 11:26 PM Reply Quote 0
    • J
      johnpoz LAYER 8 Global Moderator @Rockyuk
      last edited by Apr 11, 2022, 11:26 PM

      @rockyuk said in pfsense, web server and VLAN's:

      I am getting offline and 100% packet loss on my Gateway.

      Which gateway - how are you posting here if your internet is down? Nothing could get to pfsense wan if its gateway is down..

      There should only be a "gateway" set on your actual internet connection "wan"

      An intelligent man is sometimes forced to be drunk to spend time with his fools
      If you get confused: Listen to the Music Play
      Please don't Chat/PM me for help, unless mod related
      SG-4860 24.11 | Lab VMs 2.7.2, 24.11

      1 Reply Last reply Reply Quote 0
      • S
        stephenw10 Netgate Administrator
        last edited by Apr 11, 2022, 11:33 PM

        It works for me. Traffic to that IP is being forwarded to a webserver. I see:

        login-to-view

        Is that not correct? How are you testing?

        Steve

        R 1 Reply Last reply Apr 11, 2022, 11:40 PM Reply Quote 0
        • R
          Rockyuk @stephenw10
          last edited by Apr 11, 2022, 11:40 PM

          @stephenw10 I have switched it back to my normal connection I can't leave it on the Firewall as it is not resolving. So i have to switch between the two to keep my Web Server up.

          1 Reply Last reply Reply Quote 0
          • S
            stephenw10 Netgate Administrator
            last edited by Apr 12, 2022, 12:02 AM

            Mmm, Ok well nothing is going to work incoming whilst the gateway is down.

            I assume it was up earlier? What changed?

            R 1 Reply Last reply Apr 12, 2022, 12:05 AM Reply Quote 0
            • R
              Rockyuk @stephenw10
              last edited by Apr 12, 2022, 12:05 AM

              @stephenw10 I still get internet even when it is down which is weird. But i am wondering if it is that which is causing the routing issue with the server?

              I don't think it ever came online, even when it says it is offline I still manage to get internet access.

              1 Reply Last reply Reply Quote 0
              • S
                stephenw10 Netgate Administrator
                last edited by Apr 12, 2022, 12:15 AM

                What is the gateway? It may not respond to the monitoring pings.

                Try editing it in System > Routing > Gateways and setting an alternative monitoring IP like 8.8.8.8.

                R 1 Reply Last reply Apr 12, 2022, 10:06 AM Reply Quote 0
                • R
                  Rockyuk @stephenw10
                  last edited by Apr 12, 2022, 10:06 AM

                  @stephenw10 Ok, adding the 8.8.8.8 to the Gateway worked for keeping that up now. I have done a quick packet capture on the WAN and Web Server Interface which i zipped up a PDF file below.

                  Packet Capture.zip

                  STATES

                  login-to-view

                  ROUTES

                  login-to-view

                  The gateway that was provided by my ISP does not seem to be coming up on pfsense and it is pulling in it's own DNS servers from my ISP. Not sure if that will cause an issue but it is not what i have on my current setup. The traffic is not being routed from WAN to Web Server interface and i can't understand why.

                  1 Reply Last reply Reply Quote 0
                  • S
                    stephenw10 Netgate Administrator
                    last edited by Apr 12, 2022, 12:43 PM

                    Hmm, some conflicting results here.

                    The state table shows traffic being correctly sent to the webserver but there are no replies shown on any of those states as though the server is refusing the connection.

                    The WAN pcap doesn't show any inbound traffic on port 443 at all. It on;y covers ~4s though you probably need to filter by the external IP you're testing from.

                    The WEBSERVERS pcap shows successful two way traffic to the server though:

                    10:45:02.447710 IP 82.132.215.99.49926 > 192.168.0.100.443: tcp 0
                    10:45:02.447879 IP 192.168.0.100.443 > 82.132.215.99.49926: tcp 0
                    10:45:02.458748 IP 82.132.215.99.49926 > 192.168.0.100.443: tcp 517
                    10:45:02.459162 IP 192.168.0.100.443 > 82.132.215.99.49926: tcp 0
                    10:45:02.461764 IP 192.168.0.100.443 > 82.132.215.99.49926: tcp 1356
                    10:45:02.461868 IP 192.168.0.100.443 > 82.132.215.99.49926: tcp 384
                    10:45:02.473285 IP 82.132.215.99.49926 > 192.168.0.100.443: tcp 0
                    

                    Steve

                    R 1 Reply Last reply Apr 12, 2022, 1:04 PM Reply Quote 0
                    • R
                      Rockyuk @stephenw10
                      last edited by Apr 12, 2022, 1:04 PM

                      @stephenw10 Do you think it is the server rejecting it then? I disabled the software firewall on it and still was not passing to it. I will try a quick test now by disabling the software firewall on it and do another packet trace.

                      1 Reply Last reply Reply Quote 0
                      • S
                        stephenw10 Netgate Administrator
                        last edited by Apr 12, 2022, 1:15 PM

                        It could well be. The states showing it not responding are from different external IPs that in the pcap where it is.

                        R 1 Reply Last reply Apr 12, 2022, 1:22 PM Reply Quote 0
                        • R
                          Rockyuk @stephenw10
                          last edited by Apr 12, 2022, 1:22 PM

                          @stephenw10 I have just done two things, I have disabled the firewall on the web server and when i checked the VDSL Modem it had two live Bridge connection. I have removed one of them and it appears that the server is now up and running. But i still cannot test from internal network?

                          1 Reply Last reply Reply Quote 0
                          • S
                            stephenw10 Netgate Administrator
                            last edited by Apr 12, 2022, 1:26 PM

                            How are you testing? If you want to be able to access it via FQDN you need to enable either split-DNS or NAT reflection as shown in the link I posted above.

                            Steve

                            R 1 Reply Last reply Apr 12, 2022, 1:50 PM Reply Quote 0
                            • R
                              Rockyuk @stephenw10
                              last edited by Apr 12, 2022, 1:50 PM

                              @stephenw10 That's all working now. Thank you very much for your patience and help 😊

                              1 Reply Last reply Reply Quote 0
                              • S
                                stephenw10 Netgate Administrator
                                last edited by Apr 12, 2022, 1:51 PM

                                No worries, glad you're up and running. 👍

                                1 Reply Last reply Reply Quote 0
                                37 out of 42
                                • First post
                                  37/42
                                  Last post
                                Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.