Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Can ping to LAN but not Web Configurator

    Scheduled Pinned Locked Moved Problems Installing or Upgrading pfSense Software
    48 Posts 9 Posters 66.2k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • DerelictD
      Derelict LAYER 8 Netgate
      last edited by

      MACs will also be in your wireshark captures.

      Chattanooga, Tennessee, USA
      A comprehensive network diagram is worth 10,000 words and 15 conference calls.
      DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
      Do Not Chat For Help! NO_WAN_EGRESS(TM)

      1 Reply Last reply Reply Quote 0
      • johnpozJ
        johnpoz LAYER 8 Global Moderator
        last edited by

        yeah in there it looks right

        to where he is sending the request for 80

        An intelligent man is sometimes forced to be drunk to spend time with his fools
        If you get confused: Listen to the Music Play
        Please don't Chat/PM me for help, unless mod related
        SG-4860 24.11 | Lab VMs 2.8, 24.11

        1 Reply Last reply Reply Quote 0
        • DerelictD
          Derelict LAYER 8 Netgate
          last edited by

          Are these captures taken on .1 or .100?

          It makes a difference because if from .1 we know the SYN-ACK was sent, but not that it was actually received.  If from .100 we know it was sent and received.

          Chattanooga, Tennessee, USA
          A comprehensive network diagram is worth 10,000 words and 15 conference calls.
          DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
          Do Not Chat For Help! NO_WAN_EGRESS(TM)

          1 Reply Last reply Reply Quote 0
          • johnpozJ
            johnpoz LAYER 8 Global Moderator
            last edited by

            Have to assume it is taken on .100

            Since he states
            "I've installed Wireshark and as soon as I go to the pfsense box (192.168.1.1) I get the RED text on Black shown in Wireshark"

            I doubt he installed wireshark on the pfsense box ;)

            An intelligent man is sometimes forced to be drunk to spend time with his fools
            If you get confused: Listen to the Music Play
            Please don't Chat/PM me for help, unless mod related
            SG-4860 24.11 | Lab VMs 2.8, 24.11

            1 Reply Last reply Reply Quote 0
            • S
              SKT174
              last edited by

              Hi Guys

              I want to isolate the problem, so I grab an old desktop, put an extra NIC in it and install PFSense.

              Notebook, Cables, is the same, only difference here is the pfsense box.

              Once installation finished

              Everything works as it should, I can go to Web Configurator, i can access external internet.

              So …

              For some strange reason.. pfsense doesn't like those USB to NIC adapters, even though you can ping it.

              So disappointed as I really want to use those Intel NUC for pfsense.

              Thanks so much for the help, really appreciated.  :)

              1 Reply Last reply Reply Quote 0
              • K
                kejianshi
                last edited by

                Hey - I like your pfsense you made with the old computer.  Thats not bad actually.
                I bet it can handle whatever you need to throw at it also.

                Low power and small is nice, but that one might be pretty trouble free also assuming you can blow out the fans every 6 months or so.

                Not sure whats up with the USB NICs - It crossed my mind that they may not be getting enough power from the usb port?
                Not sure?

                1 Reply Last reply Reply Quote 0
                • stephenw10S
                  stephenw10 Netgate Administrator
                  last edited by

                  The USB NICs certainly look like the issue then. Weird that you can ping just fine though.
                  Not sure why we haven't suggested this before but try disabling any hardware offloading options. Looking back at your ifconfig output the nics both claim to support checksum offloading. If that's not working I guess it would explain it.

                  Steve

                  1 Reply Last reply Reply Quote 0
                  • S
                    SKT174
                    last edited by

                    How do I disable hardware offloading?

                    I'll willing to give it a try  :)

                    1 Reply Last reply Reply Quote 0
                    • DerelictD
                      Derelict LAYER 8 Netgate
                      last edited by

                      System: Advanced: Networking

                      Chattanooga, Tennessee, USA
                      A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                      DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                      Do Not Chat For Help! NO_WAN_EGRESS(TM)

                      1 Reply Last reply Reply Quote 0
                      • stephenw10S
                        stephenw10 Netgate Administrator
                        last edited by

                        Not helpful when you can't access the webgui.  ;)
                        You could maybe edit the config file. There's probably a way to do this from the developer shell, but I'm not sure what it might be.
                        You can probably do it temporarily from the command line. Something like:

                        ifconfig ue1 -txcsum -rxcsum
                        

                        I imagine that will get reverted when the config is reloaded though.

                        Steve

                        1 Reply Last reply Reply Quote 0
                        • DerelictD
                          Derelict LAYER 8 Netgate
                          last edited by

                          Duh.  Catch 22.

                          Those CLI changes might not stick but if they work the GUI should be accessible and the permanent changes saved.

                          Chattanooga, Tennessee, USA
                          A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                          DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                          Do Not Chat For Help! NO_WAN_EGRESS(TM)

                          1 Reply Last reply Reply Quote 0
                          • C
                            cgehring
                            last edited by

                            @stephenw10:

                            Not helpful when you can't access the webgui.  ;)
                            You could maybe edit the config file. There's probably a way to do this from the developer shell, but I'm not sure what it might be.
                            You can probably do it temporarily from the command line. Something like:

                            ifconfig ue1 -txcsum -rxcsum
                            

                            I imagine that will get reverted when the config is reloaded though.

                            Steve

                            I happened to be doing the exact same config (Love the Intel NUC!!!).  I was also using two USB NICs, and had the exact same issue.  Disabling checksum offloading as show above fixed it!!!!

                            Thank you!

                            1 Reply Last reply Reply Quote 0
                            • First post
                              Last post
                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.