Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    No Internet access from device connected to pfSense

    Scheduled Pinned Locked Moved General pfSense Questions
    12 Posts 4 Posters 1.5k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • R
      rcoleman-netgate Netgate @MrTea
      last edited by

      @MrTea Is this device on the LAN interface? If not did you add a rule to that interface to pass traffic?

      I would include screenshots of your Interface list with IPs (redact part of the WAN IP if it is not RFC1918) from the Dashboard and then maybe the firewall rules for this interface.

      Ryan
      Repeat, after me: MESH IS THE DEVIL! MESH IS THE DEVIL!
      Requesting firmware for your Netgate device? https://go.netgate.com
      Switching: Mikrotik, Netgear, Extreme
      Wireless: Aruba, Ubiquiti

      1 Reply Last reply Reply Quote 0
      • M
        MrTea
        last edited by

        @rcoleman-netgate, Yes, the device is on the lan interface.

        Here is the lan interface
        a6a7f7bd-3c7a-4512-90dc-47374a57587e-image.png

        And here are the lan firewall rules
        9e24253f-1c96-45ff-8611-4f32f7ca5355-image.png

        R 1 Reply Last reply Reply Quote 0
        • R
          rcoleman-netgate Netgate @MrTea
          last edited by

          @MrTea How about the rest of the interfaces?
          See mine here (with redactions):
          Screenshot 2023-08-06 at 12.44.34 PM.png

          Specifically what IP is your client machine getting? How does it connect to the pfSense? Directly via ethernet or through other hardware?

          Ryan
          Repeat, after me: MESH IS THE DEVIL! MESH IS THE DEVIL!
          Requesting firmware for your Netgate device? https://go.netgate.com
          Switching: Mikrotik, Netgear, Extreme
          Wireless: Aruba, Ubiquiti

          1 Reply Last reply Reply Quote 0
          • M
            MrTea
            last edited by

            Except for the WAN, there are no other interfaces.
            My client machine has an ip of 192.168.1.120
            It connected directly to pfSense via an ethernet cable. Like this:
            Internet -> pfSense (on a protectli vault) -> laptop

            I am trying to keep it simple until I can get my laptop on the internet. Then I will add other devices.
            Maybe this is helpful?
            73b73481-13e5-4e59-a680-1f03203f23b1-image.png

            R 1 Reply Last reply Reply Quote 0
            • stephenw10S
              stephenw10 Netgate Administrator
              last edited by

              Can it ping pfSense? Can it ping the upstream gateway?

              Do you see that device in the DHCP status in pfSense? It could be pulling an IP from a different dhcp server.

              1 Reply Last reply Reply Quote 0
              • M
                michmoor LAYER 8 Rebel Alliance
                last edited by

                @MrTea
                Curious. Do you still have the TP link router plugged in? Doesnt matter if its connected to the protectli or not is it plugged in anywhere in the house?
                Is your laptop also on wifi? I understand its plugged in but is it also connected to a wifi network.

                Lastly, can you go into the windows cmd prompt again and run the following command

                arp -a
                

                See if 192.168.1.1 matches up with the MAC address listed for your router.

                Firewall: NetGate,Palo Alto-VM,Juniper SRX
                Routing: Juniper, Arista, Cisco
                Switching: Juniper, Arista, Cisco
                Wireless: Unifi, Aruba IAP
                JNCIP,CCNP Enterprise

                1 Reply Last reply Reply Quote 1
                • R
                  rcoleman-netgate Netgate @MrTea
                  last edited by

                  @MrTea said in No Internet access from device connected to pfSense:

                  Except for the WAN, there are no other interfaces.
                  My client machine has an ip of 192.168.1.120

                  I asked for the things I asked for for very specific reasons.

                  You probably should provide them.

                  Ryan
                  Repeat, after me: MESH IS THE DEVIL! MESH IS THE DEVIL!
                  Requesting firmware for your Netgate device? https://go.netgate.com
                  Switching: Mikrotik, Netgear, Extreme
                  Wireless: Aruba, Ubiquiti

                  1 Reply Last reply Reply Quote 0
                  • M
                    MrTea
                    last edited by

                    @stephenw10, I can ping pfSense and the upstream gateway. I can also see my laptop in the DHCP status in pfSense.

                    @michmoor, when I am testing pfSense, on my laptop I disable wifi. However, I do still leave the TP Link router on.

                    With the clues that both of you gave me, I was able to find out this:
                    Using an ip address, I am able to ping google. But if I try to issue a dig command for google.com, I get no answer back.
                    In pfSense, when I go to Diagnostics / DNS Lookup, and enter google.com, I get an Answer.
                    So now I am thinking the issue is in the dns lookup and not general internet access.

                    stephenw10S 1 Reply Last reply Reply Quote 0
                    • stephenw10S
                      stephenw10 Netgate Administrator @MrTea
                      last edited by

                      @MrTea said in No Internet access from device connected to pfSense:

                      I can ping pfSense and the upstream gateway. I can also see my laptop in the DHCP status in pfSense.

                      Ok, so what test from the laptop is failing?

                      DNS resolution failure perhaps? If so check in Diag > DNS Lookup that pfSense can resolve against all configured servers.

                      Steve

                      M 1 Reply Last reply Reply Quote 0
                      • M
                        MrTea @stephenw10
                        last edited by

                        @stephenw10
                        Diag > DSN lookup was working correctly.
                        I had failed to properly configure the DSN Resolver and DSN Resolution. Once I made changes there, my DNS issue on my laptop cleared up and now I am "surfing the internet"!

                        Again, thank you all for pointing me in the right direction.

                        M 1 Reply Last reply Reply Quote 1
                        • M
                          michmoor LAYER 8 Rebel Alliance @MrTea
                          last edited by

                          @MrTea Is DNS Resolver listening on the LAN interface?

                          Firewall: NetGate,Palo Alto-VM,Juniper SRX
                          Routing: Juniper, Arista, Cisco
                          Switching: Juniper, Arista, Cisco
                          Wireless: Unifi, Aruba IAP
                          JNCIP,CCNP Enterprise

                          1 Reply Last reply Reply Quote 0
                          • First post
                            Last post
                          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.