Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Problem with two lan networks and access to ap

    General pfSense Questions
    5
    100
    18.4k
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • F
      firefox
      last edited by

      @stephenw10:

      My money is on Snort. Do the Snort get correctly copied across the update? Check the logs, what is being blocked?

      I currently browses through the live cd
      No package

      Still no access

      1 Reply Last reply Reply Quote 0
      • stephenw10S
        stephenw10 Netgate Administrator
        last edited by

        Lost that bet then!  ::)

        Check the firewall logs anything blocked? You've unchecked 'block private networks'?

        Forget accessing the webgui of the AP. Try some basic pinging. Try to ping everything from everything else! Check the logs again.

        Steve

        1 Reply Last reply Reply Quote 0
        • F
          firefox
          last edited by

          There Pings
          Both to ap
          Well as computer connected wirelessly to ap

          1 Reply Last reply Reply Quote 0
          • stephenw10S
            stephenw10 Netgate Administrator
            last edited by

            Sorry I'm not sure quite what you mean there. What can ping what?  :-\

            Steve

            1 Reply Last reply Reply Quote 0
            • F
              firefox
              last edited by

              i can ping from a computer that Connected to the Wired network
              to the AP
              to a computer connected to the Wireless Network

              And Reverse

              i can ping from a computer that Connected to the Wireless Network
              to a computer connected to the wired Network

              1 Reply Last reply Reply Quote 0
              • stephenw10S
                stephenw10 Netgate Administrator
                last edited by

                Ok.
                Can you ping from the pfSense box to the AP? to a wireless client?
                Can you ping from the AP to the pfSense box or a wired client?

                I have a router I use as an access point that behaves exactly as yours is doing and the reason is that it has no route to get packets back to clients on the other subnet. The AP/router usually uses it's WAN port for anything that isn't in its LAN subnet but in this scenario it has no WAN so it has no route. I have successfully worked around this by setting a subnet mask on the AP that contains all the local subnets, i.e. /16 However I have an AP this doesn't work for.
                That doesn't explain why it worked fine under 2.0.3 though.  :-\

                Steve

                1 Reply Last reply Reply Quote 0
                • F
                  firefox
                  last edited by

                  from pfsense to AP - There is Ping
                  from pfsense to wireless client - no ping
                  from AP to pfsense - no ping
                  from AP to wired client - no ping

                  1 Reply Last reply Reply Quote 0
                  • P
                    phil.davis
                    last edited by

                    from pfsense to AP - There is Ping

                    That would go out from 192.168.2.1 on pfSense directly to the AP. So pfSense OPT1 and the AP have compatible (hopefully the same) subnets.

                    from AP to pfsense - no ping

                    I guess that was from AP, ping 192.168.1.1 - the pfSense LAN IP. In that case the AP probably does not know how to route to that. If you tried to ping 192.168.2.1 then that is good, but you will need to have added a pass rule on OPT1 after booting the LiveCD version.

                    I can't understand what has happened here - the symptoms look a lot like an AP subnet/mask/default gateway problem. But it is pfSense that has been upgraded - so what is the real cause of the problem???

                    Can you post the actual AP:

                    • IP address
                    • network mask
                    • default gateway for LAN (or tell us that there is no setting for that)

                    and confirm that OPT1 is 192.168.2.1/24 and has a pass rule with source any (or OPT1 net).

                    As the Greek philosopher Isosceles used to say, "There are 3 sides to every triangle."
                    If I helped you, then help someone else - buy someone a gift from the INF catalog http://secure.inf.org/gifts/usd/

                    1 Reply Last reply Reply Quote 0
                    • F
                      firefox
                      last edited by

                      Few answers

                      Interfaces configured so

                      Wired network 192.168.0.1/24      –----> go to Switch          dhcp on pfsense 192.168.0.30 -- 100

                      Wireless Network 192.168.2.1/24  ------> go to AP                dhcp on pfsense 192.168.2.30 -- 100

                      AP Fixed address  192.168.2.101

                      ping from pfsense 192.168.0.1 to AP 192.168.2.1 There is Ping

                      ping from AP 192.168.2.1 to pfsense 192.168.0.1 no ping

                      OPT1 = WIFI = 192.168.2.1/24

                      Here are screen shots of the management interface of the AP

                      1.png_thumb
                      1.png

                      1 Reply Last reply Reply Quote 0
                      • F
                        firefox
                        last edited by

                        MORE

                        2.png
                        2.png_thumb
                        3.png
                        3.png_thumb

                        1 Reply Last reply Reply Quote 0
                        • D
                          doktornotor Banned
                          last edited by

                          Afraid your WAN should be set to Disabled, not Dynamic IP Address.

                          1 Reply Last reply Reply Quote 0
                          • K
                            kejianshi
                            last edited by

                            Totally not a pfsense problem.  Did you get it working yet?

                            1 Reply Last reply Reply Quote 0
                            • P
                              phil.davis
                              last edited by

                              I can't see where it lets you specify

                              1. the LAN netmask (/24 or 255.255.255.0)
                              2. a LAN gateway

                              Probably (1) is on a screen somewhere - maybe I missed it.
                              I suspect it won't have a place to enter (2), because it thinks it is already a router (gateway).

                              As the Greek philosopher Isosceles used to say, "There are 3 sides to every triangle."
                              If I helped you, then help someone else - buy someone a gift from the INF catalog http://secure.inf.org/gifts/usd/

                              1 Reply Last reply Reply Quote 0
                              • F
                                firefox
                                last edited by

                                @kejianshi:

                                Totally not a pfsense problem.  Did you get it working yet?

                                not yet

                                @doktornotor:

                                Afraid your WAN should be set to Disabled, not Dynamic IP Address.

                                Selecting other options
                                And there is no communication

                                @phil.davis:

                                I can't see where it lets you specify

                                1. the LAN netmask (/24 or 255.255.255.0)
                                2. a LAN gateway

                                Probably (1) is on a screen somewhere - maybe I missed it.
                                I suspect it won't have a place to enter (2), because it thinks it is already a router (gateway).

                                As soon as I turn off the dhcp
                                And gave him a fixed network address
                                the LAN netmask
                                and LAN gateway
                                are from the pfsense

                                I will try to run pfsense live cd 2.0.3

                                1 Reply Last reply Reply Quote 0
                                • D
                                  doktornotor Banned
                                  last edited by

                                  @firefox:

                                  Selecting other options
                                  And there is no communication

                                  Huh, whut?

                                  @firefox:

                                  As soon as I turn off the dhcp
                                  And gave him a fixed network address
                                  the LAN netmask
                                  and LAN gateway
                                  are from the pfsense

                                  Eh? There is no netmask and gateway visible anywhere…

                                  1 Reply Last reply Reply Quote 0
                                  • F
                                    firefox
                                    last edited by

                                    @doktornotor:

                                    @firefox:

                                    Selecting other options
                                    And there is no communication

                                    Huh, whut?

                                    If I choose another option
                                    I will not have internet access

                                    @firefox:

                                    As soon as I turn off the dhcp
                                    And gave him a fixed network address
                                    the LAN netmask
                                    and LAN gateway
                                    are from the pfsense

                                    Eh? There is no netmask and gateway visible anywhere…

                                    there is on pfsense

                                    1 Reply Last reply Reply Quote 0
                                    • stephenw10S
                                      stephenw10 Netgate Administrator
                                      last edited by

                                      @firefox:

                                      ping from pfsense 192.168.0.1 to AP 192.168.2.1 There is Ping

                                      ping from AP 192.168.2.1 to pfsense 192.168.0.1 no ping

                                      I assume this must be a typo and the ping was to the AP at 192.168.2.101?

                                      You need to try pinging from the AP to the pfSense OPT1 address, 192.168.2.1. That should work fine.

                                      @firefox:

                                      from pfsense to wireless client - no ping

                                      That's odd. The problems with the AP should not cause this. Presumably AP to wireless client is OK?

                                      Steve

                                      1 Reply Last reply Reply Quote 0
                                      • stephenw10S
                                        stephenw10 Netgate Administrator
                                        last edited by

                                        Reading the manual for that router (wbr-3406tx) it appears there's no way to set a subnet mask or gateway for the LAN interface but it's not a problem because you can add a route manually. Adding a route is the correct way to do this, fudging the subnet is a workaround.

                                        In Advanced Setting: Routing: add this:

                                        Destination: 192.168.0.1
                                        Subnet mask: 255.255.255.0
                                        Gateway: 192.168.2.1
                                        Hop: 1

                                        Enable that and hit save. Your AP will now have a route back to the pfSense LAN subnet.

                                        Steve

                                        1 Reply Last reply Reply Quote 0
                                        • D
                                          doktornotor Banned
                                          last edited by

                                          @firefox:

                                          If I choose another option
                                          I will not have internet access

                                          The only correct option is Disable/None/whatever matching this… Not any random other option.

                                          @firefox:

                                          there is on pfsense

                                          That is NOT what we are talking about at all. We are talking about netmask/GW on the AP. And on that note, there should be no gateway set for LAN interfaces on pfSense!

                                          @stephenw10:

                                          Reading the manual for that router (wbr-3406tx) it appears there's no way to set a subnet mask or gateway for the LAN interface but it's not a problem because you can add a route manually

                                          Apparently this piece of garbage HW would best be utilized in a dumpster.

                                          1 Reply Last reply Reply Quote 0
                                          • K
                                            kejianshi
                                            last edited by

                                            I'm withholding judgement on the usefullness of this device as an AP until stephenw10 suggestion is tried.

                                            Even if the router/AP doesn't end up being as slick as some other APs, I do see some usefullnes in it.
                                            It is currently isolated from the LAN, so for sharing internet to visitors, it might be cool and secure (-:

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post