Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Problem with two lan networks and access to ap

    Scheduled Pinned Locked Moved General pfSense Questions
    100 Posts 5 Posters 30.2k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • K
      kejianshi
      last edited by

      "If I had to buy
      Would you buy something much better"

      For your purposes, its hard to do much better - Easy to spend much more money though.
      If I wanted wireless N vs G, I'd go with the E2000 - Also dirt cheap used.

      A new solution will probably not bring you any more practical utility and will cost you.

      1 Reply Last reply Reply Quote 0
      • stephenw10S
        stephenw10 Netgate Administrator
        last edited by

        Hmm, this is interesting but confusing.

        It is possible that it's only possible to add static routes on the WAN interface, there is no option to select the interface. However if that were the case then adding that route should have had no effect at all. I assume by your statement "nothing worked" that you were then unable to connect to the webgui at all? Seems like your router may be misbehaving somehow.

        Anyway you have yet more options! Another way to allow the access point to have a route back to LAN is to NAT between them. Now usually you wouldn't want that but it could be done with manual NAT configuation.

        The other thing you could do, and this is what I've done, is just not worry about it!  ;) I have an access point that (mis)behaves in exactly this way. It has no route back to other interfaces, I cannot add a route to it, I cannot configure a gateway on it's LAN, I can enter a fudged subnet mask but that doesn't work. So I set it up and ignore it. I probably haven't needed to check its webgui for a year or so and when I do I just connect by wifi.

        Steve

        1 Reply Last reply Reply Quote 0
        • K
          kejianshi
          last edited by

          Personally, I think he should have all his connections on the LAN ports on that AP and that he should put tape over his WAN port.

          1 Reply Last reply Reply Quote 0
          • F
            firefox
            last edited by

            Good Morning

            I did a Hard Reset to AP
            And put everything to the initial state as if he were Router

            Then again I followed the guide to make it to AP
            And it works as AP
            Just the access its management interface is only when connecting Directly to him
            wired or wireless

            I do not know what to say
            I tried everything I know
            And all you know

            Just does not work
            I will stay with it how it is now
            There is internet access from wireless devices

            But not sharing files between computers on the wired network
            To computers on the wireless network
            Or reversed

            It would make me crazy in the near future
            So many thanks to everyone for the help

            If I find why this happens I promise to update

            1 Reply Last reply Reply Quote 0
            • stephenw10S
              stephenw10 Netgate Administrator
              last edited by

              Just because you can't access the AP webgui from the wired network that should not mean you can't access other wireless clients. That is some other issue. As long as you have the correct firewall rules in place in pfSense there should be access between the wired and wireless networks.

              Steve

              1 Reply Last reply Reply Quote 0
              • F
                firefox
                last edited by

                Unfortunately it also does not work
                We have 5 laptops at home
                One currently running and is with me
                Has two shared folders

                They are accessible only if the computer is connected to the wired network

                Of course the same thing
                But the reverse

                No wireless devices access to the wired network shared directories

                1 Reply Last reply Reply Quote 0
                • stephenw10S
                  stephenw10 Netgate Administrator
                  last edited by

                  Ok, a number of things could be happening here:
                  pfSense is blocking the traffic. That's easy to check because it will appear in the firewall logs.
                  There's a routing problem. This doesn't appear anywhere so it's harder to spot but we've just spent a good deal of time checking out the routing on your network and it looks good.
                  Something is blocking the traffic locally. E.g. Windows firewall is blocking access because the traffic is coming from another subnet.

                  Remind me, you are not able to ping between wired and wireless clients either?

                  Steve

                  1 Reply Last reply Reply Quote 0
                  • F
                    firefox
                    last edited by

                    @stephenw10:

                    Remind me, you are not able to ping between wired and wireless clients either?

                    Steve

                    Yes

                    Specific computers that I am trying to access shared folders
                    Are running Linux Ubuntu

                    1 Reply Last reply Reply Quote 0
                    • stephenw10S
                      stephenw10 Netgate Administrator
                      last edited by

                      Ah, er, yes you're not able to ping or yes you are able to ping?  ;)

                      If you plug a client into one of the other LAN ports on the wbr-3406 can you ping the wired clients (on 192.168.0.X) from there? That should exclude and wifi weirdness from the problem.

                      Steve

                      1 Reply Last reply Reply Quote 0
                      • F
                        firefox
                        last edited by

                        Yes there is ping

                        from wireless computer 192.168.2.8 to wired computer 192.168.0.2
                        and
                        from wired computer 192.168.0.2 to wireless computer 192.168.2.8

                        1 Reply Last reply Reply Quote 0
                        • stephenw10S
                          stephenw10 Netgate Administrator
                          last edited by

                          Ok so you can ping but not do file transfer? And this worked ok before?

                          This is probably because the machines are not on the same subnet so they are not directly discoverable by Windows (or whatever). Have you tried accessing the shared folder directly by its IP?

                          Steve

                          1 Reply Last reply Reply Quote 0
                          • K
                            kejianshi
                            last edited by

                            If you don't know how to access a share by IP, its easy in windows…

                            hit start > computer

                            on left side, click network

                            select your current computer in the list

                            now in that bar at top of file browser, put in \192.168.1.30  (or whatever the IP of the computer with the share is)

                            I'm slipping - I should have suggested this way way back but "shares" was never mentioned early on.

                            1 Reply Last reply Reply Quote 0
                            • F
                              firefox
                              last edited by

                              Just now I tried to access a network folder
                              Using ip number

                              It work

                              Why not see all computers when entering the network

                              1 Reply Last reply Reply Quote 0
                              • K
                                kejianshi
                                last edited by

                                File sharing uses broadcasts that don't cross subnets to advertise themselves.

                                So, when you have files and printers shared, the easy way to reach them across subnets is by IP since no broadcast is required that way.

                                Understand?

                                If I had known you had shares, I would have suggested it earlier.  Good thing stephenw10 did.

                                1 Reply Last reply Reply Quote 0
                                • stephenw10S
                                  stephenw10 Netgate Administrator
                                  last edited by

                                  If you have a domain controller/WINS server that can register connected clients then you can span subnets I believe, not my area.

                                  If you have enabled "Register DHCP leases in DNS forwarder" then you can access remote machines by their host name but they still won't be discoverable.

                                  You may be able to get discovery to work across the subnets using the IGMP proxy, I've never tried that.

                                  Steve

                                  1 Reply Last reply Reply Quote 0
                                  • F
                                    firefox
                                    last edited by

                                    Can I assume that the problem
                                    Related to the same reason that you can not access the management interface of the AP

                                    I'm still trying to check why this is happening and fix it
                                    But not urgent
                                    As before

                                    If I run into something on the way so I check and try

                                    At least I have access to shared folders
                                    As you have shown me

                                    1 Reply Last reply Reply Quote 0
                                    • stephenw10S
                                      stephenw10 Netgate Administrator
                                      last edited by

                                      It's two distinct problems:

                                      You can't access the wifi router because it's not possible to give it a route back to the LAN side subnet.

                                      You can't see the wifi clients from the wired network because because the protocol Windows uses to discover network shares doesn't span subnets.

                                      I would try adding the route again to the access point. I should do nothing or fix it. The fact that it killed everything last time you tried it implies something wasn't right.

                                      Steve

                                      1 Reply Last reply Reply Quote 0
                                      • F
                                        firefox
                                        last edited by

                                        @stephenw10:

                                        You can't see the wifi clients from the wired network because because the protocol Windows uses to discover network shares doesn't span subnets.

                                        in My work
                                        There were about 2000 computers connected
                                        Over 50 different networks

                                        I tap the icon "Network" on the computer
                                        I see all the networks
                                        Then click on the network icon
                                        And see all the computers on the network

                                        I guess strains because they are connected to servers
                                        So I guess the server tells computers where they are at,

                                        Is there something similar to pfsense

                                        @stephenw10:

                                        I would try adding the route again to the access point. I should do nothing or fix it. The fact that it killed everything last time you tried it implies something wasn't right.

                                        I prepare a file with all the screenshots of this router
                                        I will attach it to the next post
                                        See what I did there
                                        What should be done

                                        @stephenw10:

                                        You can't see the wifi clients from the wired network because because the protocol Windows uses to discover network shares doesn't span subnets.

                                        I use Linux not Windows

                                        How can you upload here a presentation weighs 2.8 MB
                                        Or upload more images in a single message

                                        1 Reply Last reply Reply Quote 0
                                        • F
                                          firefox
                                          last edited by

                                          Here is a link to download the pdf file
                                          With a screenshot of the router's management interface

                                          http://www.fileswap.com/dl/R6JzKxPLhV/ap.pdf.html

                                          1 Reply Last reply Reply Quote 0
                                          • stephenw10S
                                            stephenw10 Netgate Administrator
                                            last edited by

                                            @firefox:

                                            I guess strains because they are connected to servers
                                            So I guess the server tells computers where they are at.

                                            Exactly.

                                            @firefox:

                                            Is there something similar to pfsense?

                                            No. (I assume you mean for pfSense)

                                            You are probably using the Windows SMB protocol for file shares in Linux, though there are others, so the same applies. You need a domain controller to register the available shares across all subnets and distribute that information. This isn't my forte though.  ;)

                                            Here is a useful thread: http://forum.pfsense.org/index.php?topic=22064.0

                                            I would try adding the route I described earlier into the AP routing table again. I can't see how it could possibly break anything. It may not work but it should cause any harm.

                                            Steve

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.