Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Problem with two lan networks and access to ap

    Scheduled Pinned Locked Moved General pfSense Questions
    100 Posts 5 Posters 30.1k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • K
      kejianshi
      last edited by

      OK - So now I need to ask some dumb questions.

      Have you power-cycled the AP?  What model AP is it?  Are you running squid or snort or any packages?  Which packages?

      1 Reply Last reply Reply Quote 0
      • F
        firefox
        last edited by

        @kejianshi:

        OK - So now I need to ask some dumb questions.

        Have you power-cycled the AP?  What model AP is it?  Are you running squid or snort or any packages?  Which packages?

        I turned off and turned it on several times during attempts to look at why I do not have access to it

        I do have a snort and squid
        The interface with access to ap installed after the installation of packages
        And there was no problem

        It works just right

        level one WBR-3406TX Wireless Broadband NAT Router

        The only difference I see in Dashboard
        It is in
        Services Status
        Appears apinger Gateway Monitoring Daemon was not in 2.0.3

        dash.png
        dash.png_thumb

        1 Reply Last reply Reply Quote 0
        • K
          kejianshi
          last edited by

          Usually when I see someone troubleshooting a problem with SNORT running I just abandon the thread, however…

          In services > proxy Server:

          can you check the box for "Bypass proxy for Private Address Space (RFC 1918) destination" and save.

          Then can you reboot pfsense and the AP

          Then try again.

          1 Reply Last reply Reply Quote 0
          • F
            firefox
            last edited by

            Still no access

            weird

            1 Reply Last reply Reply Quote 0
            • F
              firefox
              last edited by

              I do not think it is blocked
              Because it worked great before upgrading

              Could it be because the gateway

              The new package appears under Services Status

              apinger – Gateway Monitoring Daemon

              1 Reply Last reply Reply Quote 0
              • D
                doktornotor Banned
                last edited by

                @kejianshi:

                Usually when I see someone troubleshooting a problem with SNORT running I just abandon the thread, however…

                Disable snort? Works? Disable both snort and squid? Works? And with that, I'm out of this thread, following the good advice above, essential for mental sanity.

                1 Reply Last reply Reply Quote 0
                • K
                  kejianshi
                  last edited by

                  This thing is a full-on broadband router - Are you 100% sure your are NOT running any of its many functions that will break its ability to play well with pfsense?

                  level one WBR-3406TX Wireless Broadband NAT Router

                  Please do me a favor…  Draw me a diagram how this this is connected also.

                  1 Reply Last reply Reply Quote 0
                  • F
                    firefox
                    last edited by

                    When I changed this router to ap
                    I followed online Guide
                    I canceled the dhcp
                    I canceled the firewall
                    I plugged to the lan port
                    I gave him a fixed address outside the range of dhcp addresses of pfsense

                    The only thing there is a network name ssid
                    And password to the network

                    And again it worked properly for six months
                    Just two days ago after upgraded the pfsense
                    I do not have access to the management interface

                    I have not changed anything there

                    again
                    Thanks for the help

                    1 Reply Last reply Reply Quote 0
                    • K
                      kejianshi
                      last edited by

                      OK - I'm going to go ahead and join you in not knowing whats wrong.

                      Is this a stand alone machine?

                      Could you boot this pfsense from livecd with no packages and no rules and try?

                      This way can know if 2.1 works for you but maybe your settings or packages are just screwed up.

                      1 Reply Last reply Reply Quote 0
                      • F
                        firefox
                        last edited by

                        @kejianshi:

                        Is this a stand alone machine?

                        I did not understand what it means stand alone machine ?

                        I will describe what I have

                        I took a computer without an operating system with nothing
                        I added three network cards

                        Downloaded from the website of pfsense
                        Version 2.0.3 to burn to disc

                        I turned on the computer and installed the system

                        Beyond that I do not have much access to this computer
                        One network card connected to the modem
                        Second network card is connected to the switch
                        Third network card connected to AP

                        I do not have a disk with version 2.1
                        I'll have to download and burn

                        1 Reply Last reply Reply Quote 0
                        • K
                          kejianshi
                          last edited by

                          I would try it with a livecd.  This way you don't have to go changing settings to experiment to find out if its just the settings or packages.
                          You can tinker and the changes will not be permanent.

                          1 Reply Last reply Reply Quote 0
                          • F
                            firefox
                            last edited by

                            OK
                            I downloaded the file, burn it
                            I turned on the system from the disk
                            I defined the interfaces according to what I wrote earlier

                            I currently browses through the operating system disk

                            Still no access

                            111111.png
                            111111.png_thumb

                            1 Reply Last reply Reply Quote 0
                            • stephenw10S
                              stephenw10 Netgate Administrator
                              last edited by

                              The IPv4/v6 thing is not relevant here. With it enabled by default in the beta and RC images it sometime caused odd connection problems when people had broken IPv6 implenmentations at their ISP or router/AP.

                              My money is on Snort. Do the Snort get correctly copied across the update? Check the logs, what is being blocked?

                              Steve

                              1 Reply Last reply Reply Quote 0
                              • F
                                firefox
                                last edited by

                                @stephenw10:

                                My money is on Snort. Do the Snort get correctly copied across the update? Check the logs, what is being blocked?

                                I currently browses through the live cd
                                No package

                                Still no access

                                1 Reply Last reply Reply Quote 0
                                • stephenw10S
                                  stephenw10 Netgate Administrator
                                  last edited by

                                  Lost that bet then!  ::)

                                  Check the firewall logs anything blocked? You've unchecked 'block private networks'?

                                  Forget accessing the webgui of the AP. Try some basic pinging. Try to ping everything from everything else! Check the logs again.

                                  Steve

                                  1 Reply Last reply Reply Quote 0
                                  • F
                                    firefox
                                    last edited by

                                    There Pings
                                    Both to ap
                                    Well as computer connected wirelessly to ap

                                    1 Reply Last reply Reply Quote 0
                                    • stephenw10S
                                      stephenw10 Netgate Administrator
                                      last edited by

                                      Sorry I'm not sure quite what you mean there. What can ping what?  :-\

                                      Steve

                                      1 Reply Last reply Reply Quote 0
                                      • F
                                        firefox
                                        last edited by

                                        i can ping from a computer that Connected to the Wired network
                                        to the AP
                                        to a computer connected to the Wireless Network

                                        And Reverse

                                        i can ping from a computer that Connected to the Wireless Network
                                        to a computer connected to the wired Network

                                        1 Reply Last reply Reply Quote 0
                                        • stephenw10S
                                          stephenw10 Netgate Administrator
                                          last edited by

                                          Ok.
                                          Can you ping from the pfSense box to the AP? to a wireless client?
                                          Can you ping from the AP to the pfSense box or a wired client?

                                          I have a router I use as an access point that behaves exactly as yours is doing and the reason is that it has no route to get packets back to clients on the other subnet. The AP/router usually uses it's WAN port for anything that isn't in its LAN subnet but in this scenario it has no WAN so it has no route. I have successfully worked around this by setting a subnet mask on the AP that contains all the local subnets, i.e. /16 However I have an AP this doesn't work for.
                                          That doesn't explain why it worked fine under 2.0.3 though.  :-\

                                          Steve

                                          1 Reply Last reply Reply Quote 0
                                          • F
                                            firefox
                                            last edited by

                                            from pfsense to AP - There is Ping
                                            from pfsense to wireless client - no ping
                                            from AP to pfsense - no ping
                                            from AP to wired client - no ping

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.