Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Problem with two lan networks and access to ap

    Scheduled Pinned Locked Moved General pfSense Questions
    100 Posts 5 Posters 30.1k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • F
      firefox
      last edited by

      Do not know if it is related to
      Before I upgraded to 2.1

      Everything worked properly with all these laws

      Furthermore there was no law on the computer from which I am trying to access the interface

      l.png
      l.png_thumb
      w.png
      w.png_thumb

      1 Reply Last reply Reply Quote 0
      • K
        kejianshi
        last edited by

        I think doktornotor is right.  Traffic seems to be working and allowed for the most part on both interfaces.  All I can imagine is that your limiter is breaking the AP interface access.

        1 Reply Last reply Reply Quote 0
        • D
          doktornotor Banned
          last edited by

          Yeah, that may have well worked before but not after upgrade. (Also completely unclear what you've actually done there.) Simplify the configuration to barebones for troubleshooting!

          1 Reply Last reply Reply Quote 0
          • K
            kejianshi
            last edited by

            And with that - I'll check back in after some sleep…  Alot of it.

            1 Reply Last reply Reply Quote 0
            • F
              firefox
              last edited by

              @kejianshi:

              And with that - I'll check back in after some sleep…  Alot of it.

              Thank you both for your help

              I will try to suspend the rules, or remove them and see if i have access

              1 Reply Last reply Reply Quote 0
              • stephenw10S
                stephenw10 Netgate Administrator
                last edited by

                IPv4/IPv6 issue? I don't think v6 is enabled by default in release, not sure though.

                Steve

                1 Reply Last reply Reply Quote 0
                • F
                  firefox
                  last edited by

                  @doktornotor:

                  Well, I would suggest to flush the traffic shaping down the drain for starters.

                  @kejianshi:

                  I think doktornotor is right.  Traffic seems to be working and allowed for the most part on both interfaces.  All I can imagine is that your limiter is breaking the AP interface access.

                  I tried without rules
                  I tried to freeze them
                  Or removing them
                  Still the same result

                  @stephenw10:

                  IPv4/IPv6 issue? I don't think v6 is enabled by default in release, not sure though.

                  Steve

                  Indeed ipv6 off
                  I tried to run it but it requires ipv6
                  How do I fill it

                  ipv6w.png
                  ipv6w.png_thumb
                  ipv6l.png
                  ipv6l.png_thumb

                  1 Reply Last reply Reply Quote 0
                  • K
                    kejianshi
                    last edited by

                    OK - So now I need to ask some dumb questions.

                    Have you power-cycled the AP?  What model AP is it?  Are you running squid or snort or any packages?  Which packages?

                    1 Reply Last reply Reply Quote 0
                    • F
                      firefox
                      last edited by

                      @kejianshi:

                      OK - So now I need to ask some dumb questions.

                      Have you power-cycled the AP?  What model AP is it?  Are you running squid or snort or any packages?  Which packages?

                      I turned off and turned it on several times during attempts to look at why I do not have access to it

                      I do have a snort and squid
                      The interface with access to ap installed after the installation of packages
                      And there was no problem

                      It works just right

                      level one WBR-3406TX Wireless Broadband NAT Router

                      The only difference I see in Dashboard
                      It is in
                      Services Status
                      Appears apinger Gateway Monitoring Daemon was not in 2.0.3

                      dash.png
                      dash.png_thumb

                      1 Reply Last reply Reply Quote 0
                      • K
                        kejianshi
                        last edited by

                        Usually when I see someone troubleshooting a problem with SNORT running I just abandon the thread, however…

                        In services > proxy Server:

                        can you check the box for "Bypass proxy for Private Address Space (RFC 1918) destination" and save.

                        Then can you reboot pfsense and the AP

                        Then try again.

                        1 Reply Last reply Reply Quote 0
                        • F
                          firefox
                          last edited by

                          Still no access

                          weird

                          1 Reply Last reply Reply Quote 0
                          • F
                            firefox
                            last edited by

                            I do not think it is blocked
                            Because it worked great before upgrading

                            Could it be because the gateway

                            The new package appears under Services Status

                            apinger – Gateway Monitoring Daemon

                            1 Reply Last reply Reply Quote 0
                            • D
                              doktornotor Banned
                              last edited by

                              @kejianshi:

                              Usually when I see someone troubleshooting a problem with SNORT running I just abandon the thread, however…

                              Disable snort? Works? Disable both snort and squid? Works? And with that, I'm out of this thread, following the good advice above, essential for mental sanity.

                              1 Reply Last reply Reply Quote 0
                              • K
                                kejianshi
                                last edited by

                                This thing is a full-on broadband router - Are you 100% sure your are NOT running any of its many functions that will break its ability to play well with pfsense?

                                level one WBR-3406TX Wireless Broadband NAT Router

                                Please do me a favor…  Draw me a diagram how this this is connected also.

                                1 Reply Last reply Reply Quote 0
                                • F
                                  firefox
                                  last edited by

                                  When I changed this router to ap
                                  I followed online Guide
                                  I canceled the dhcp
                                  I canceled the firewall
                                  I plugged to the lan port
                                  I gave him a fixed address outside the range of dhcp addresses of pfsense

                                  The only thing there is a network name ssid
                                  And password to the network

                                  And again it worked properly for six months
                                  Just two days ago after upgraded the pfsense
                                  I do not have access to the management interface

                                  I have not changed anything there

                                  again
                                  Thanks for the help

                                  1 Reply Last reply Reply Quote 0
                                  • K
                                    kejianshi
                                    last edited by

                                    OK - I'm going to go ahead and join you in not knowing whats wrong.

                                    Is this a stand alone machine?

                                    Could you boot this pfsense from livecd with no packages and no rules and try?

                                    This way can know if 2.1 works for you but maybe your settings or packages are just screwed up.

                                    1 Reply Last reply Reply Quote 0
                                    • F
                                      firefox
                                      last edited by

                                      @kejianshi:

                                      Is this a stand alone machine?

                                      I did not understand what it means stand alone machine ?

                                      I will describe what I have

                                      I took a computer without an operating system with nothing
                                      I added three network cards

                                      Downloaded from the website of pfsense
                                      Version 2.0.3 to burn to disc

                                      I turned on the computer and installed the system

                                      Beyond that I do not have much access to this computer
                                      One network card connected to the modem
                                      Second network card is connected to the switch
                                      Third network card connected to AP

                                      I do not have a disk with version 2.1
                                      I'll have to download and burn

                                      1 Reply Last reply Reply Quote 0
                                      • K
                                        kejianshi
                                        last edited by

                                        I would try it with a livecd.  This way you don't have to go changing settings to experiment to find out if its just the settings or packages.
                                        You can tinker and the changes will not be permanent.

                                        1 Reply Last reply Reply Quote 0
                                        • F
                                          firefox
                                          last edited by

                                          OK
                                          I downloaded the file, burn it
                                          I turned on the system from the disk
                                          I defined the interfaces according to what I wrote earlier

                                          I currently browses through the operating system disk

                                          Still no access

                                          111111.png
                                          111111.png_thumb

                                          1 Reply Last reply Reply Quote 0
                                          • stephenw10S
                                            stephenw10 Netgate Administrator
                                            last edited by

                                            The IPv4/v6 thing is not relevant here. With it enabled by default in the beta and RC images it sometime caused odd connection problems when people had broken IPv6 implenmentations at their ISP or router/AP.

                                            My money is on Snort. Do the Snort get correctly copied across the update? Check the logs, what is being blocked?

                                            Steve

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.