Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    no internet on some wireless devices.

    Wireless
    4
    21
    1.9k
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • T
      tung2567
      last edited by

      i have Verizon Fios in Philly. was using a Netgear router to work with the Verizon ONT fiber modem. just swapped out the Netgear to a PFsense machine. so everything is very basic config, nothing fancy.
      i notice 2 devices still refuse to get internet, the Nvidia Shield and Samsung S5 tablet. ARP table shows they are connected but they dont have internet. on the 2 devices, i have tried DHCP as well as static IP but nothing works. what's the trick or how to troubleshoot?
      i have been trying the past few days and about to go crazy just because of these 2 devices. i know for sure their wifi hardware works because i can use the neighbors's wifi AP

      1 Reply Last reply Reply Quote 0
      • stephenw10S
        stephenw10 Netgate Administrator
        last edited by

        What are you using for wifi? The netgear in AP mode?

        It could be an IPv6 issue. Those are both Android devices and that will try to use v6 if pfSense is providing it. Likely the Netgear did not.

        Steve

        T JKnottJ 2 Replies Last reply Reply Quote 0
        • T
          tung2567 @stephenw10
          last edited by

          @stephenw10
          the netgear is gone completely. for wifi, i have 3 Eero devices in bridge mode.
          i have never worked with IPv6. what must i do? disable or enable it in pfsense? really appreciate all your help as i am new

          1 Reply Last reply Reply Quote 0
          • stephenw10S
            stephenw10 Netgate Administrator
            last edited by

            First just check whether any IPv6 is on the system. Look in Status > Interfaces for any public v6 IPs.

            Steve

            T 1 Reply Last reply Reply Quote 0
            • T
              tung2567 @stephenw10
              last edited by

              @stephenw10
              ipv6 is disabled
              5c0a783a-7306-4ccd-a9ee-0bf512c1a947-image.png

              strangely, i see IPv6 on the interfaces. but they are not public, i think:
              621964b7-021f-41d9-817c-567eca28813d-image.png

              1 Reply Last reply Reply Quote 0
              • stephenw10S
                stephenw10 Netgate Administrator
                last edited by

                Yes, but you do have a valid prefix delegation so devices on LAN will be getting an IPv6 IP and trying to use it. Are those clients on LAN?

                The easiest thing to there is disable the DHCPv6 and RA servers on LAN in Services > DHCPv6.
                Reconnect the clients and test.

                T 1 Reply Last reply Reply Quote 0
                • T
                  tung2567 @stephenw10
                  last edited by

                  @stephenw10
                  yes, both DHCPv6 and RA servers on LAN in Services disabled. restarted the Samsung tablet and still same issue.
                  with DHCP or static IP, the tablet still cannot get on. i cant even Ping the 192.168.1.1. Eero does not show the tablet as online on it's network. i rebooted Eero many times too.

                  i also have a TP-Link access point in the basement. when i connect to that, i can access online and ping 192.168.1.1 too.

                  JKnottJ 2 Replies Last reply Reply Quote 0
                  • JKnottJ
                    JKnott @stephenw10
                    last edited by

                    @stephenw10 said in no internet on some wireless devices.:

                    Those are both Android devices and that will try to use v6 if pfSense is providing it.

                    The issue is Android devices do not support DHCPv6, thanks to some genius at Google. SLAAC should be used. Disabling IPv6 is not the answer, except for clueless idiots who don't know what they're talking about.

                    PfSense running on Qotom mini PC
                    i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
                    UniFi AC-Lite access point

                    I haven't lost my mind. It's around here...somewhere...

                    1 Reply Last reply Reply Quote 0
                    • JKnottJ
                      JKnott @tung2567
                      last edited by

                      @tung2567 said in no internet on some wireless devices.:

                      yes, both DHCPv6 and RA servers on LAN in Services disabled.

                      It appears you're getting some misinformation. Does your ISP provide IPv6? Does it work OK for wired devices? For non Android over WiFi? If you do have IPv6, you should configure the LAN to use SLAAC and not DHCPv6. Android has a bug (actually a designed in flaw) in that it does not support DHCPv6.

                      When you say you don't have Internet, do you mean nothing at all? Or IPv4 only? A bit better description of your problem would go a long way.

                      PfSense running on Qotom mini PC
                      i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
                      UniFi AC-Lite access point

                      I haven't lost my mind. It's around here...somewhere...

                      T 1 Reply Last reply Reply Quote 0
                      • JKnottJ
                        JKnott @tung2567
                        last edited by

                        @tung2567 said in no internet on some wireless devices.:

                        i also have a TP-Link access point in the basement. when i connect to that, i can access online and ping 192.168.1.1 too.

                        That says a lot. If one access point works and another doesn't, then it's a problem with that other AP and not a pfSense problem.

                        PfSense running on Qotom mini PC
                        i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
                        UniFi AC-Lite access point

                        I haven't lost my mind. It's around here...somewhere...

                        T 1 Reply Last reply Reply Quote 0
                        • stephenw10S
                          stephenw10 Netgate Administrator
                          last edited by

                          We can see from the interface status that the ISP is providing a valid prefix delegation and that the LAN is using it. By default the RA and DHCPv6 servers are enabled on LAN so clients there could use them.
                          However that clearly isn't the issue as disabling them made no difference.

                          Are the Eero APs on the LAN subnet? Is the TP-Link AP also on LAN?
                          Yes, if they are both on LAN this looks like an Eero issue. Were you using that with the Netgear router previously?

                          1 Reply Last reply Reply Quote 0
                          • T
                            tung2567 @JKnott
                            last edited by

                            @jknott
                            let me draw things out so it's easier.
                            c21ab73b-8b62-4a43-b4aa-6560e62f3380-image.png
                            old setup was working perfectly fine. i just wanted to use the new setup to play around n learn with pfsense and vlan.

                            new setup has a total of 4 ports. 1 WAN and 1 LAN. however, i bridge LAN and 2 other ports to make them act as a normal netgear using this method....https://protectli.com/kb/how-to-enable-lan-bridge-with-pfsense/
                            i wonder if that's why im having this crazy issue:

                            1. some devices on Eero don't have any internet. they connect to the Eero fine and ping other devices but just cant get online.
                            2. some devices on Eero has internet for browsing but some apps refuses to work. error about servers being down.
                            3. TP link AP works fine however with all other devices. i have not tested all of them.

                            just for fun, i revert back to the OLD setup and all is good again so i know it's the pfsense machine.
                            you are right, turning DHCPv6 off has no impact...

                            1 Reply Last reply Reply Quote 0
                            • T
                              tung2567 @JKnott
                              last edited by

                              @jknott
                              i have verizon fios in Philadelphia. i assume i get ipv6 from the fios ONT box.
                              the issue seems to affect ipads in the house too. several apps would come up with hostname errors.
                              b6e08460-15e2-4963-817d-1880055c9049-image.png
                              thats what i have now. not sure where 100.11.16.1 comes from but it's not my public IP.

                              working fine as off now
                              b1d17db3-ae77-4307-a878-77758dadd1af-image.png

                              mobiles dont work if i changed to
                              b7331262-7a2e-43b8-8d6a-139822705fcd-image.png

                              so i will assume you meant this. but still not good :(
                              1929e8ba-ed65-4248-b6d3-b15762faa442-image.png

                              J JKnottJ 2 Replies Last reply Reply Quote 0
                              • J
                                Jarhead @tung2567
                                last edited by

                                @tung2567 What are your firewall rules on the OPT interfaces?

                                1 Reply Last reply Reply Quote 0
                                • JKnottJ
                                  JKnott @tung2567
                                  last edited by

                                  @tung2567

                                  IPv6 Configuration Type should be track interface.

                                  PfSense running on Qotom mini PC
                                  i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
                                  UniFi AC-Lite access point

                                  I haven't lost my mind. It's around here...somewhere...

                                  T 1 Reply Last reply Reply Quote 0
                                  • stephenw10S
                                    stephenw10 Netgate Administrator
                                    last edited by

                                    Yup, that^.
                                    And what interfaces are in bridge0?
                                    And have you moved bridge filtering from the members to the bridge?
                                    https://docs.netgate.com/pfsense/en/latest/bridges/firewall.html#bridging-and-firewalling

                                    Steve

                                    T 1 Reply Last reply Reply Quote 0
                                    • T
                                      tung2567 @JKnott
                                      last edited by

                                      @jknott
                                      for LAN ipv6 config type, it was Track Interface (i believe). but i thought you wanted me to change to SLAAC? any way, i will do Track Interface again.
                                      currently i revert back to the OLD setup because wife n kids gotta do their homework. that's hard when half of their devices are not working.
                                      will verify your recommendation next week. thank you!

                                      JKnottJ 1 Reply Last reply Reply Quote 0
                                      • T
                                        tung2567 @stephenw10
                                        last edited by

                                        @stephenw10
                                        in my System > Advanced > System Tunables
                                        i already have:
                                        net.link.bridge.pfil_member value = 0
                                        and
                                        net.link.bridge.pfil_bridge value = 1

                                        hopefully this bridging is not the cause.
                                        in all the videos i have seen, everyone just used WAN, LAN, and a dumb switch plugged into LAN to have more ports. i did not want a switch to take up more space in the tiny living room so i used bridging.

                                        1 Reply Last reply Reply Quote 0
                                        • JKnottJ
                                          JKnott @tung2567
                                          last edited by

                                          @tung2567 said in no internet on some wireless devices.:

                                          for LAN ipv6 config type, it was Track Interface (i believe). but i thought you wanted me to change to SLAAC?

                                          Yes I did. However, there's a couple of ways of doing SLAAC. Since you get your prefix from DHCPv6-PD, you have to use track interface. However, if you had a static configuration, then you'd use SLAAC.

                                          PfSense running on Qotom mini PC
                                          i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
                                          UniFi AC-Lite access point

                                          I haven't lost my mind. It's around here...somewhere...

                                          1 Reply Last reply Reply Quote 0
                                          • stephenw10S
                                            stephenw10 Netgate Administrator
                                            last edited by

                                            What interfaces are in bridge0? igc1-3?

                                            What rules do you have there?

                                            There doesn't appear to be any difference between igc2 and igc3 from what you've shown us so far so you would expect clients on either AP to pass traffic similarly. But clearly there is a difference.

                                            Steve

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.