Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    No LAN internet

    Scheduled Pinned Locked Moved General pfSense Questions
    66 Posts 6 Posters 12.6k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • H
      hoandco @Gertjan
      last edited by

      @gertjan
      Ok will switch other router off
      Os is MXlinux

      1 Reply Last reply Reply Quote 0
      • H
        hoandco @Gertjan
        last edited by

        @gertjan
        Did you the ping 1.1.1.1 in terminal on lan connected pc.
        It is connected to the pfsense pc through an unmanaged tp link 16 port switch.

        GertjanG 1 Reply Last reply Reply Quote 0
        • GertjanG
          Gertjan @hoandco
          last edited by

          @hoandco said in No LAN internet:

          Did you the ping 1.1.1.1 in terminal on lan connected pc.

          Why do you ask ?
          Half the planet is pinging 1.1.1.1 and 8.8.8.8, and I still don't know why.

          root@DiskStation2:~# ping 1.1.1.1
          PING 1.1.1.1 (1.1.1.1) 56(84) bytes of data.
          64 bytes from 1.1.1.1: icmp_seq=1 ttl=51 time=17.2 ms
          64 bytes from 1.1.1.1: icmp_seq=2 ttl=51 time=17.3 ms
          ^C
          --- 1.1.1.1 ping statistics ---
          2 packets transmitted, 2 received, 0% packet loss, time 2ms
          rtt min/avg/max/mdev = 17.161/17.244/17.328/0.155 ms
          

          No "help me" PM's please. Use the forum, the community will thank you.
          Edit : and where are the logs ??

          H 1 Reply Last reply Reply Quote 0
          • H
            hoandco @Gertjan
            last edited by

            @gertjan
            Sorry did you see the ping in terminal on pc connected to Lan.

            GertjanG 1 Reply Last reply Reply Quote 0
            • GertjanG
              Gertjan @hoandco
              last edited by

              @hoandco

              Saw what where ? This one ? :

              18313922-f883-49e0-8fe8-154c5865bf18-image.png

              Looks ok to me.

              No "help me" PM's please. Use the forum, the community will thank you.
              Edit : and where are the logs ??

              H 1 Reply Last reply Reply Quote 0
              • H
                hoandco @Gertjan
                last edited by

                @gertjan
                No the 1.1.1.1 ping

                H 1 Reply Last reply Reply Quote 0
                • H
                  hoandco @hoandco
                  last edited by

                  @hoandco
                  Host(New nexthop: 0.0.0.0)
                  From 192.168.55.1: icmp_seq=34 Redirect Host(New nexthop: 0.0.0.0)
                  From 192.168.55.1: icmp_seq=34 Redirect Host(New nexthop: 0.0.0.0)
                  From 192.168.55.1: icmp_seq=34 Redirect Host(New nexthop: 0.0.0.0)

                  GertjanG 1 Reply Last reply Reply Quote 0
                  • GertjanG
                    Gertjan @hoandco
                    last edited by

                    @hoandco

                    Are you sure that your PC 192.168.55.1 got its DHCP inform from pfSense ?
                    You didn't change anything on the DHCP server (LAN) page ?
                    Check the DHCP server log page, do you see your PC doing DHCP request and pfSense DHCP answering ?
                    Your PC should use 192.168.55.1 for a gateway and DNS.

                    It looks like this
                    https://serverfault.com/questions/402023/why-do-icmp-redirect-host-happen

                    is happening because pfSense 'thinks' there is another gateway on the LAN 192.168.55.0/24 ....
                    I never saw that kind of messages ...

                    No "help me" PM's please. Use the forum, the community will thank you.
                    Edit : and where are the logs ??

                    johnpozJ GertjanG 2 Replies Last reply Reply Quote 0
                    • johnpozJ
                      johnpoz LAYER 8 Global Moderator @Gertjan
                      last edited by

                      Did the IP get changed from the 182 to 192 on pfsense? Did you set a gateway on this interface? If you did then pfsense thinks its a wan IP.. You do not set a gateway on the lan side interfaces of pfsense.

                      An intelligent man is sometimes forced to be drunk to spend time with his fools
                      If you get confused: Listen to the Music Play
                      Please don't Chat/PM me for help, unless mod related
                      SG-4860 24.11 | Lab VMs 2.8, 24.11

                      H 1 Reply Last reply Reply Quote 0
                      • H
                        hoandco @johnpoz
                        last edited by

                        @johnpoz
                        John
                        Thanks Yes I did change the IP address to 192.
                        However I still cannot connect to the internet on a Lan connected pc.
                        Leigh

                        johnpozJ H 2 Replies Last reply Reply Quote 0
                        • johnpozJ
                          johnpoz LAYER 8 Global Moderator @hoandco
                          last edited by

                          @hoandco did you set a gateway on this interface - you do not set a gateway on a lan side interface.

                          lan.jpg

                          Are your clients actually using that as their gateway, or do they still try to talk to the old 182 address?

                          What is the routing table on pfsense?

                          routes.jpg

                          Notice my default route is out the wan.. Routes for other networks that are local, are direct, etc.

                          An intelligent man is sometimes forced to be drunk to spend time with his fools
                          If you get confused: Listen to the Music Play
                          Please don't Chat/PM me for help, unless mod related
                          SG-4860 24.11 | Lab VMs 2.8, 24.11

                          H 1 Reply Last reply Reply Quote 0
                          • H
                            hoandco @hoandco
                            last edited by

                            @hoandco
                            I tried the gateway on the LAN but it it did not work So I changed it back.
                            This is on dedicated pc with 2 port intel card.
                            The gateway is connected online as you will see.
                            The LAN rules appear to be working.
                            However I can't get internet on my pc or laptop connected to the LAN.
                            Leigh

                            johnpozJ 1 Reply Last reply Reply Quote 0
                            • johnpozJ
                              johnpoz LAYER 8 Global Moderator @hoandco
                              last edited by

                              @hoandco said in No LAN internet:

                              I tried the gateway on the LAN but it it did not work

                              There is NO gateway set on a lan side interface... If you tried that no then it wouldn't work..

                              An intelligent man is sometimes forced to be drunk to spend time with his fools
                              If you get confused: Listen to the Music Play
                              Please don't Chat/PM me for help, unless mod related
                              SG-4860 24.11 | Lab VMs 2.8, 24.11

                              1 Reply Last reply Reply Quote 0
                              • H
                                hoandco @johnpoz
                                last edited by

                                @johnpoz
                                No I don't think so
                                But I will check

                                1 Reply Last reply Reply Quote 0
                                • GertjanG
                                  Gertjan @Gertjan
                                  last edited by

                                  Please confirm :

                                  @gertjan said in No LAN internet:

                                  Check the DHCP server log page, do you see your PC doing DHCP request and pfSense DHCP answering ?

                                  Page Services > DHCP Server > LAN

                                  No "help me" PM's please. Use the forum, the community will thank you.
                                  Edit : and where are the logs ??

                                  H 1 Reply Last reply Reply Quote 0
                                  • H
                                    hoandco @Gertjan
                                    last edited by

                                    @gertjan
                                    I will in the morning
                                    Leigh

                                    1 Reply Last reply Reply Quote 0
                                    • stephenw10S
                                      stephenw10 Netgate Administrator
                                      last edited by

                                      Ok so am I correctly reading that a client on LAN can ping 8.8.8.8 but not 1.1.1.1?

                                      And that when you try to ping 1.1.1.1 you see at the LAN client:

                                      Host(New nexthop: 0.0.0.0)
                                      From 192.168.55.1: icmp_seq=34 Redirect Host(New nexthop: 0.0.0.0)
                                      

                                      That implies you have a routing issue on pfSense. Check the routing table again.

                                      H 1 Reply Last reply Reply Quote 0
                                      • H
                                        hoandco @stephenw10
                                        last edited by

                                        @stephenw10
                                        So just to be sure.
                                        If ping 8.8.8.8 from pfsense menu it works. If I use terminal on the same pc with pfsense app open it works. If I ping 1.1.1.1 in terminal on the same pc it shows what I sent.
                                        So what can be wrong with the routing table? How do I check it? What should it show.
                                        Leigh

                                        stephenw10S 1 Reply Last reply Reply Quote 0
                                        • stephenw10S
                                          stephenw10 Netgate Administrator @hoandco
                                          last edited by

                                          @hoandco said in No LAN internet:

                                          If I use terminal on the same pc with pfsense app open it works.

                                          Not sure what you mean by 'pfSense app'.

                                          Are both those tests from a command prompt on a PC behind pfSense?

                                          The result fro pinging 1.1.1.1 is pfSense (192.168.55.1) sending an icmp redircet to the PC but it's sending an invalid next hop.
                                          But that implies pfSense has a route to 1.1.1.1 via what it thinks is at 0.0.0.0. And that it thinks the PC is the same subnet as that other router.
                                          Both of those seem unlikely but there's clearly something odd there. Some other device acting as a router? Multiple networks on the PC?

                                          H 1 Reply Last reply Reply Quote 0
                                          • H
                                            hoandco @stephenw10
                                            last edited by

                                            @stephenw10
                                            Stephen
                                            You may be right. I will disconnect the WiFi extender router in workshop.
                                            It's Saturday morning here so I time to work through this.
                                            Leigh

                                            H 1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.