• Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login
Netgate Discussion Forum
  • Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login

Blocking off wireless network.

Scheduled Pinned Locked Moved Firewalling
64 Posts 3 Posters 14.1k Views
Loading More Posts
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • K
    kejianshi
    last edited by Sep 1, 2013, 11:18 AM Sep 1, 2013, 11:16 AM

    The AP isn't supposed to assign the IPs.
    Pfsense is supposed to handle DHCP for it.
    You should have given your DD-WRT a static IP.
    Trust me when I tell you, you didn't do something EXACTLY as you are supposed to.

    1 Reply Last reply Reply Quote 0
    • C
      CaptainWTF
      last edited by Sep 2, 2013, 3:34 AM Sep 2, 2013, 3:14 AM

      @kejianshi:

      The AP isn't supposed to assign the IPs.
      Pfsense is supposed to handle DHCP for it.
      You should have given your DD-WRT a static IP.
      Trust me when I tell you, you didn't do something EXACTLY as you are supposed to.

      I did follow the tutorial EXACTLY as I was supposed to.

      AP is set to assign out IP at 10.0.1.10-245 and I set the IP of the AP static @ 10.0.1.5 so shut your face sir :P

      I followed that tutorial EXACTLY word for fucking word.

      3 times.

      1 Reply Last reply Reply Quote 0
      • D
        doktornotor Banned
        last edited by Sep 2, 2013, 6:55 AM

        @CaptainWTF:

        AP is set to assign out IP at 10.0.1.10-245 and I set the IP of the AP static @ 10.0.1.5 so shut your face sir :P
        I followed that tutorial EXACTLY word for fucking word.

        Uh, WTF!

        Open the Setup -> Basic Setup tab
        WAN Connection Type : Disabled
        Local IP Address: 192.168.1.2 (i.e. different from primary router and out of primary router's DHCP pool)
        Subnet Mask: 255.255.255.0 (i.e. same as primary router)
        DHCP Server: Disable (also uncheck DNSmasq options)
        (Recommended) Gateway/Local DNS: IP address of primary router (many things will fail without this)
        (Optional) Assign WAN Port to Switch (visible only with WAN Connection Type set to disabled): Enable this if you want to use WAN port as a switch port
        (Optional) NTP Client: Enable/Disable (if Enabled, specify Gateway/Local DNS above)
        Save

        1 Reply Last reply Reply Quote 0
        • K
          kejianshi
          last edited by Sep 2, 2013, 12:37 PM Sep 2, 2013, 12:15 PM

          Its ok.  You know what they say. 
          If at first you don't succeed - WTF - Try, Try again.  And again. And sometimes again.
          You will get it right.
          BTW - All of the things they list as "Optional" and "recommended" in that how-to aren't optional.
          Disable all the optional stuff as well and take all the optional steps.
          (Sorry if I didn't mention that before - Shutting face now  :P)

          1 Reply Last reply Reply Quote 0
          • C
            CaptainWTF
            last edited by Sep 2, 2013, 5:15 PM Sep 2, 2013, 5:03 PM

            @kejianshi:

            Its ok.  You know what they say. 
            If at first you don't succeed - WTF - Try, Try again.  And again. And sometimes again.
            You will get it right.
            BTW - All of the things they list as "Optional" and "recommended" in that how-to aren't optional.
            Disable all the optional stuff as well and take all the optional steps.
            (Sorry if I didn't mention that before - Shutting face now  :P)

            BLAHHHHHH, Okay. I'll give it another shot :) thanks lol.

            1 Reply Last reply Reply Quote 0
            • K
              kejianshi
              last edited by Sep 2, 2013, 5:10 PM

              O Captain! My Captain! WTF not I say.  Good luck.

              1 Reply Last reply Reply Quote 0
              • C
                CaptainWTF
                last edited by Sep 2, 2013, 5:16 PM

                Still doesn't seem to work. what the hell am I doing wrong lol

                1 Reply Last reply Reply Quote 0
                • K
                  kejianshi
                  last edited by Sep 2, 2013, 5:32 PM

                  What version of DD-WRT are you using?  What build number?  (upper right hand corner of screen).
                  Also, what type of router?  Lets start there.

                  Also, if you remove DD-WRT router and you plug a computer into the new OPT1 interface, does that work?

                  1 Reply Last reply Reply Quote 0
                  • C
                    CaptainWTF
                    last edited by Sep 2, 2013, 5:47 PM

                    before I do the transition itl assign the router an IP from the AP interface. usually 10.0.1.10

                    Buffalo and a buffalo WZR-HP-n450.

                    Build v24sp2

                    1 Reply Last reply Reply Quote 0
                    • K
                      kejianshi
                      last edited by Sep 2, 2013, 5:52 PM

                      I'm not sure I understand this:

                      "before I do the transition itl assign the router an IP from the AP interface. usually 10.0.1.10"

                      Lets take baby steps then.  1st.  Lets make sure that both your LAN and your OPT1 work, have separate IPs and dish out DHCP as expected and that the firewall rules allow traffic.

                      Could you plug a computer into both of those and test make sure they are up and can access internet.  Then start in on DD-WRT again.

                      1 Reply Last reply Reply Quote 0
                      • C
                        CaptainWTF
                        last edited by Sep 2, 2013, 5:53 PM

                        @kejianshi:

                        I'm not sure I understand this:

                        "before I do the transition itl assign the router an IP from the AP interface. usually 10.0.1.10"

                        Lets take baby steps then.  1st.  Lets make sure that both your LAN and your OPT1 work, have separate IPs and dish out DHCP as expected and that the firewall rules allow traffic.

                        Could you plug a computer into both of those and test make sure they are up and can access internet.  Then start in on DD-WRT again.

                        What I do know is when I have router plugged into AP interface, no WAN connectivity.

                        1 Reply Last reply Reply Quote 0
                        • K
                          kejianshi
                          last edited by Sep 2, 2013, 5:56 PM

                          Thats not what I asked about.

                          I want to know if the LAN and the OPT1 work and provide internet to a computer if one is plugged directly into it.

                          Once I know pfsense is working as advertised, then it will be easy to focus on DD-WRT, confident that any problems encountered are DD-WRT and not pfsense.

                          1 Reply Last reply Reply Quote 0
                          • C
                            CaptainWTF
                            last edited by Sep 2, 2013, 6:11 PM

                            @kejianshi:

                            Thats not what I asked about.

                            I want to know if the LAN and the OPT1 work and provide internet to a computer if one is plugged directly into it.

                            Once I know pfsense is working as advertised, then it will be easy to focus on DD-WRT, confident that any problems encountered are DD-WRT and not pfsense.

                            Nah thatd be a big fat negatory, nothing if I plug it into my computer.

                            Lan yes, OPT1, no.

                            OPT1 assigned IP, No internet.

                            1 Reply Last reply Reply Quote 0
                            • K
                              kejianshi
                              last edited by Sep 2, 2013, 6:19 PM Sep 2, 2013, 6:16 PM

                              OK - Do you know how to take snapshots and post to forum?

                              Go to Interfaces > OPT1

                              Post whats there.

                              Then go to Firewall > Rules >OPT1 and then post that here.

                              We will need to fix this 1st and DD-WRT second.  It will work.

                              (My guess is that you need to create a firewall rule on OPT1 to allow ALL to ANY)

                              1 Reply Last reply Reply Quote 0
                              • C
                                CaptainWTF
                                last edited by Sep 2, 2013, 6:19 PM

                                Here they are, and you're probably right I imagine the rules should be similar to how the rules in LAN are set up.

                                fwrules.png
                                fwrules.png_thumb
                                AP.png
                                AP.png_thumb

                                1 Reply Last reply Reply Quote 0
                                • D
                                  doktornotor Banned
                                  last edited by Sep 2, 2013, 6:23 PM Sep 2, 2013, 6:21 PM

                                  Considering you have no traffic allowed… WTF, LOL :D Also, you do NOT want to block private networks on an interface with private IP.  ;)

                                  1 Reply Last reply Reply Quote 0
                                  • C
                                    CaptainWTF
                                    last edited by Sep 2, 2013, 6:23 PM

                                    @doktornotor:

                                    Considering you have no traffic allowed… WTF, LOL :D

                                    It configured itself that way hush. lol.

                                    1 Reply Last reply Reply Quote 0
                                    • K
                                      kejianshi
                                      last edited by Sep 2, 2013, 6:32 PM Sep 2, 2013, 6:24 PM

                                      Need to unblock private networks on that interface.  Un-Check that block.
                                      You don't need to block bogon networks either.

                                      Those two blocks really only need be checked on WAN, not on any LAN or LAN-like interface.

                                      Next, you need to go to the firewall > rules > AP tab and create a rule to pass interface AP,  protocol any, source AP subnet, destination any, and give it a description like "Allow AP to any"

                                      After you do all this, go to status > filter reload

                                      Then try your computer on that interface again.

                                      Also, would you please go to services > DHCP server > AP and post what is there also.

                                      WTF - Why not check that too right?

                                      1 Reply Last reply Reply Quote 0
                                      • D
                                        doktornotor Banned
                                        last edited by Sep 2, 2013, 6:30 PM Sep 2, 2013, 6:28 PM

                                        Well

                                        • uncheck those private network checkboxes at the bottom
                                        • set up an allow rule on the AP iface like this:

                                        Action: Pass
                                        Interface: AP
                                        Protocol: any
                                        Source: AP subnet
                                        Destination: NOT LAN subnet

                                        1 Reply Last reply Reply Quote 0
                                        • C
                                          CaptainWTF
                                          last edited by Sep 2, 2013, 6:30 PM

                                          Like this?

                                          wut2.png_thumb
                                          wut2.png

                                          1 Reply Last reply Reply Quote 0
                                          45 out of 64
                                          • First post
                                            45/64
                                            Last post
                                          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.
                                            This community forum collects and processes your personal information.
                                            consent.not_received