Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    I cannot configured pfsense

    Scheduled Pinned Locked Moved Firewalling
    22 Posts 5 Posters 11.4k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • E Offline
      Erkan
      last edited by

      Thank you for your reply but I already tried it. It doesnt work
      I tried a lot of different configuration.
      When I change the LAN ip as different subnet, this time, I cannot connect the web interface.
      If I use the same sabnet I can connect the web interface via LAN ip
      I dont understand whats happening :(

      1 Reply Last reply Reply Quote 0
      • B Offline
        biggsy
        last edited by

        Did you change your PC's IP address and subnet to match the new LAN subnet?

        1 Reply Last reply Reply Quote 0
        • marcellocM Offline
          marcelloc
          last edited by

          You must check a lot of basic settings

          • configure gateway

          • configure interfaces without using same network on LAN/WAN

          • configure dns

          • try to access configuration via LAN

          • check lan rules to see if you have rules allowing access to internet

          The best place to change your network settings is in front of console

          Treinamentos de Elite: http://sys-squad.com

          Help a community developer! ;D

          1 Reply Last reply Reply Quote 0
          • P Offline
            phil.davis
            last edited by

            When I read your IP addresses I suspect that you are putting your modem/router on the LAN? I guess your real internet access is via something other than an Ethernet cable, thus the need for a back-end modem/router (e.g. ADSL) between the pFsense device and your ISP. You need to have a subnet for the back-end link between your modem (192.168.1.1/24) and your pFsense WAN port (192.168.1.3/24) - that is 192.168.1.0/24. Then your front-end LAN port has to be a different address and subnet (e.g. 192.168.2.1 in subnet 192.168.2.0/24) as marcelloc suggested. When you change the pFsense LAN address you also need to change the DHCP so that the pFsense DHCP service on the LAN gives your client/s addresses in the new LAN subnet.

            If you are having trouble changing the front-end LAN address and DHCP server settings at the same time you might need to first change the pFsense LAN address to 192.168.2.1, then manually give your client PC a new IP address in the new subnet (e.g. 192.168.2.10) so you can get back to the pFsense GUI. Then you can change the DHCP settings from the GUI, then put your client PC back to use DHCP and you should get a working address.

            As the Greek philosopher Isosceles used to say, "There are 3 sides to every triangle."
            If I helped you, then help someone else - buy someone a gift from the INF catalog http://secure.inf.org/gifts/usd/

            1 Reply Last reply Reply Quote 0
            • E Offline
              Erkan
              last edited by

              thank you for your replay
              I think I got it.
              I'll try as soon as possible.
              I'm gonna write the result

              1 Reply Last reply Reply Quote 0
              • E Offline
                Erkan
                last edited by

                here is my latest situation
                pfsense dhcp setting is off
                modem dhcp setting is on
                1. I connected the pfsense lan port to switch and pfsense wan port connected to modem
                2. My modem gateway ip address is 192.168.1.1
                3. My pfsense lan port ip address is 10.0.0.1(static)
                4. My pfsense wan port ip address is 192.168.1.2(static)
                5. My laptop ip address is 10.0.0.10(static)
                6. My pfsense wan port gateway is default(192.168.1.1)
                7. My pfsense lan port gateway is off

                I can connect to pfsense web GUI via on lan port but I cannot connect to internet
                additionaly, my all network is down with this configuration

                where am I wrong?
                can anyone tell me what is right configuration?

                Thank you.

                1 Reply Last reply Reply Quote 0
                • marcellocM Offline
                  marcelloc
                  last edited by

                  What dns servers are configures on pfsense and on notebook?

                  Treinamentos de Elite: http://sys-squad.com

                  Help a community developer! ;D

                  1 Reply Last reply Reply Quote 0
                  • E Offline
                    Erkan
                    last edited by

                    I did not setup any dns configuration on pfsense but my laptop use google dns (8.8.8.8)

                    1 Reply Last reply Reply Quote 0
                    • E Offline
                      Erkan
                      last edited by

                      I solved the problem.
                      I changed the pfsense lan gateway address as 0.0.0.0
                      it was "none"
                      now, pfsense can connect the internet but i can not.
                      I'm using the google dns server and pfsense lan ip address as my laptop's gateway

                      1 Reply Last reply Reply Quote 0
                      • marcellocM Offline
                        marcelloc
                        last edited by

                        @Erkan:

                        I changed the pfsense lan gateway address as 0.0.0.0

                        leave it none and configure default gateway on system -> routing

                        0.0.0.0 does not looks like a valid gateway

                        Treinamentos de Elite: http://sys-squad.com

                        Help a community developer! ;D

                        1 Reply Last reply Reply Quote 0
                        • johnpozJ Online
                          johnpoz LAYER 8 Global Moderator
                          last edited by

                          where would you have set that

                          So here is example lan interface setting, see where its NONE for gateway on lan

                          Are you trying to just route or are you double natting?

                          What devices are you connected to has a 192.168.1.1 address?  What is the make and model of your modem/router your connecting the pfsense wan interface too?

                          Also you don't have your "modem" connected to this switch your lan port of your pfsense is connected too?

                          Even with a double nat you should not have any issues if your actually connecting the correct interfaces to the correct things.

                          modem/router –- wan (pfsense) lan --switch-- laptop/pc

                          Pfsense wan should work on dhcp, and pfsense dhcp should handout to your laptop/pc connected to the lan side, when you setup pfsense have it use 10.0.0.1 / 24 as its lan interface and then dhcp should hand out 10.0.0.2 - 254 to your dhcp clients.

                          lanconfig.jpg
                          lanconfig.jpg_thumb

                          An intelligent man is sometimes forced to be drunk to spend time with his fools
                          If you get confused: Listen to the Music Play
                          Please don't Chat/PM me for help, unless mod related
                          SG-4860 25.07.1 | Lab VMs 2.8, 25.07.1

                          1 Reply Last reply Reply Quote 0
                          • E Offline
                            Erkan
                            last edited by

                            thank you everyone, I did it, but :) this time squid and squidguard services are stop immediately
                            what it may be reason?

                            1 Reply Last reply Reply Quote 0
                            • johnpozJ Online
                              johnpoz LAYER 8 Global Moderator
                              last edited by

                              huh?  How would squid and squidguard even be install on a system you were just setting up?

                              Those are packages that you install and configure after you have a working system.

                              An intelligent man is sometimes forced to be drunk to spend time with his fools
                              If you get confused: Listen to the Music Play
                              Please don't Chat/PM me for help, unless mod related
                              SG-4860 25.07.1 | Lab VMs 2.8, 25.07.1

                              1 Reply Last reply Reply Quote 0
                              • E Offline
                                Erkan
                                last edited by

                                I referenced the some internet documents for setup
                                I think I have to set it up step by step
                                I will just install them and I'm not going to the setup for the see of services status

                                1 Reply Last reply Reply Quote 0
                                • johnpozJ Online
                                  johnpoz LAYER 8 Global Moderator
                                  last edited by

                                  What documents?? Squid and Squidguard are not part of initial setup of pfsense – how would you have even installed them if you did not have a working connecting from pfsense?  And yeah those if not correctly configured could break internet access for sure ;)  At least http access to sites, etc.

                                  An intelligent man is sometimes forced to be drunk to spend time with his fools
                                  If you get confused: Listen to the Music Play
                                  Please don't Chat/PM me for help, unless mod related
                                  SG-4860 25.07.1 | Lab VMs 2.8, 25.07.1

                                  1 Reply Last reply Reply Quote 0
                                  • E Offline
                                    Erkan
                                    last edited by

                                    I used some internet squid and squidguard setup guides.
                                    I will restore default settings squid and squidguard after than I will check the both services.
                                    otherwise, I will remove both and download again. tomorrow ;)

                                    1 Reply Last reply Reply Quote 0
                                    • johnpozJ Online
                                      johnpoz LAYER 8 Global Moderator
                                      last edited by

                                      not sure I would suggest you follow any "internet" guides for squid and squidguard you find on a simple google.  I would really stick with docs from pfsense or pfsense forums for help with squid and squidguard on pfsense.

                                      They are not generic type installs on the pfsense platform, so generic guides could be off.

                                      Example
                                      http://doc.pfsense.org/index.php/Setup_Squid_as_a_Transparent_Proxy

                                      Not sure it has been updated for 2.0 line, etc.

                                      I would highly suggest a get a working setup before you play with squid on pfsense.  Also in your #7 post you make no mention at all of any squid or squidguard being installed, nor any of your other posts.

                                      An intelligent man is sometimes forced to be drunk to spend time with his fools
                                      If you get confused: Listen to the Music Play
                                      Please don't Chat/PM me for help, unless mod related
                                      SG-4860 25.07.1 | Lab VMs 2.8, 25.07.1

                                      1 Reply Last reply Reply Quote 0
                                      • E Offline
                                        Erkan
                                        last edited by

                                        fixed all.
                                        I formatted the pfsense and reinstall it and packages :)
                                        it's working properly except proxy report
                                        here is my log path: /var/squid/report
                                        when I try to get report I've got this error:

                                        LigthSquid diagnostic.
                                        Error : report folder '/var/lightsquid/report' not contain any valid data! Please run lightparser.pl (and check 'report' folder content)
                                        Please check config file !
                                        something wrong

                                        1 Reply Last reply Reply Quote 0
                                        • marcellocM Offline
                                          marcelloc
                                          last edited by

                                          lighsquid need some log from squid to work.

                                          go  to some websites and then try to update lightsquid again

                                          Treinamentos de Elite: http://sys-squad.com

                                          Help a community developer! ;D

                                          1 Reply Last reply Reply Quote 0
                                          • E Offline
                                            Erkan
                                            last edited by

                                            I'm going to try this tomorrow.
                                            I!ll  write to result

                                            thank you

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.