Roku Player Not Playing Nice With PFsense 2.0.2

[stephenw10]

So it only happens going through wifi and it looses connectivity in exactly 24Hrs. Hmm.
I think I would start to look at the wifi encryption re-keying intervals or anything else that can be set. It is usually something small like a few minutes but can be much higher if required. It may be set so high that the roku box is having a hard time handling it.

Steve

[rjcrowder]

I have the same config (pfsense and wireless access point) with multiple Roku boxes and no issue… The Roku boxes rarely ever lock up or disconnect.  I have the DHCP server configured to assign specific IP addresses for each of the Roku boxes. I also have rules that exclude the Roku boxes (by an IP address range) from being redirected to squid/dansguardian.

[stephenw10]

This all points to a wifi problem. Everything except that the box you are using as an access point now was previously functining just fine when it was handling routing duties as well.  :-
Is it possible you changed the wifi settings when you disabled dhcp in the AP? Is it filtering the dhcp requests somehow?

Steve

[ghostshell]

@stephenw10:

This all points to a wifi problem. Everything except that the box you are using as an access point now was previously functining just fine when it was handling routing duties as well.  :-
Is it possible you changed the wifi settings when you disabled dhcp in the AP? Is it filtering the dhcp requests somehow?

Steve

i dont think i did, its running buffalo's version of DD-WRT, i just left everything as is and on the main setup page i turned DHCP off, surprisingly it did not disconnect last night and sometimes if i get the error it still will work

[ghostshell]

@rjcrowder:

I have the same config (pfsense and wireless access point) with multiple Roku boxes and no issue… The Roku boxes rarely ever lock up or disconnect.  I have the DHCP server configured to assign specific IP addresses for each of the Roku boxes. I also have rules that exclude the Roku boxes (by an IP address range) from being redirected to squid/dansguardian.

During the 3 step connection process do your ROKU's fail on step 2? connect to local area network, if not, what did you setup/change in PFSense?

[ghostshell]

just so you guys know my setup, Steve is pretty familular with my setup since he helped create it

stock PFSense
Rules to allow outgoing traffic on LAN2 and LAN3
Rules to allow TCP and UDP within the LAN2 network
Rules to allow my webserver/mail server to be seen externally

thats pretty much it, im on nanoBSD so i cant really install any extra packages unless someone knows how!?!

[stephenw10]

@ghostshell:

i just left everything as is and on the main setup page i turned DHCP off

You must have also reconnected it differently in some way. Is it now connected via one of its 'lan' ports? Is that bridged to the wifi?
It would be easy to overlook something in the dd-wrt config that is filtering stuff.

Steve

[ghostshell]

@stephenw10:

@ghostshell:

i just left everything as is and on the main setup page i turned DHCP off

You must have also reconnected it differently in some way. Is it now connected via one of its 'lan' ports? Is that bridged to the wifi?
It would be easy to overlook something in the dd-wrt config that is filtering stuff.

Steve

i decided last night to create a rule to allow all ICMP traffic within my LAN2 network, went to try and connect to my wireless network and all three connection steps went green! I plan on narrowing down which ICMP rule i need to let step 2 be successful and not just leave it set to any ICMP. Before that it didnt disconnect for over a day, looks like step 2 is sending a PING request somewhere, i have that traffic being logged so im gonna look and see what its doing during step 2. So far it seems like everything is OK now, will post if anything changes, thank you all for your help! Especially Steve, Steve to answer your question i have the LAN2 port connected to one of the switch ports on the buffalo router. i would like to use the WAN port so i can use my Barracuda device again, i think there is an option within DD-WRT, maybe not with the Buffalo branded one, to map the WAN port as a LAN port. Im kinda using it as a switch that has a wireless AP built in.

I may have to create a new thread, but anyone know how to install any package on NanoBSD running off a CF card, i was told i could not install most packages.

[rjcrowder]

Not sure on the Buffalo dd-wrt version, but the standard dd-wrt definitely lets you map WAN to LAN.

[ghostshell]

@rjcrowder:

Not sure on the Buffalo dd-wrt version, but the standard dd-wrt definitely lets you map WAN to LAN.

fingers crossed!