Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    No Internet on my captive portale

    Scheduled Pinned Locked Moved Captive Portal
    31 Posts 6 Posters 4.4k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • D
      doktornotor Banned
      last edited by

      What do you mean "When I connect to lan 1 or lan 2 by WIFI"?

      1 Reply Last reply Reply Quote 0
      • E
        EMWEE
        last edited by

        1. What subnet masks do you use?

        2. Check your DNS configuration.

        Go to your CP manually with 192.168.6.253 login with your credentials/voucher. Then do a nslookup.

        1 Reply Last reply Reply Quote 0
        • A
          ayoub92400
          last edited by

          Thanks the return!

          @doktornotor

          By this I mean that I'm connecting to those LANs through APs.

          @EMWEE

          I use /24 for all the subnets

          I've already checked it . I used multiple DNS like my DC or even 8.8.8.8 . The clients have the Pfsense as DNS server.

          1 Reply Last reply Reply Quote 0
          • D
            doktornotor Banned
            last edited by

            How are those APs configured? If they are actually routing and running DHCP, things will never work properly.

            1 Reply Last reply Reply Quote 0
            • A
              ayoub92400
              last edited by

              There are ARUBA APs.

              The DHCP is configured only on the Pfsense 's lans interfaces.

              The APs don't do anything special. They just have SSIDs that points to the pfsense's network that's it.

              1 Reply Last reply Reply Quote 0
              • E
                EMWEE
                last edited by

                Do you use NAT on your pfsense?

                1 Reply Last reply Reply Quote 0
                • GertjanG
                  Gertjan
                  last edited by

                  When you connected to the GUI or Telnet or SSH interface of one of your AP's, can you:
                  ping a remote location ?
                  Does it resolve when ping www.google.com ?
                  ping 92.168.6.253 (and why is LAN1 not 192.168.6.1 ? - your first AP on this segment 192.168.6.2, etc ?)
                  The gateway of every AP on LAN1 segment is set to 92.168.6.253 ?
                  The DNS of every AP on LAN1 segment is set to 92.168.6.253 ?

                  Btw The IP's of your AP's should be on the "Allowed IP addresses list" on the captive portal, so they can 'NTP', etc for their own needs.

                  Also: never ever use the WAN network plug on an AP when using it as a simple AP - you can use other available 'switch' network RJ45 plugs.

                  No "help me" PM's please. Use the forum, the community will thank you.
                  Edit : and where are the logs ??

                  1 Reply Last reply Reply Quote 0
                  • A
                    ayoub92400
                    last edited by

                    I left the NAT configuration by default…

                    My AP can communicate with all my servers including Pfsense.

                    My AP are on 192.168.10.0.  They are located on vlans which allow communication.

                    They have no  gateway configured because we can't do that on those APs...

                    Where can I find the "Allowed IP addresses list"

                    1 Reply Last reply Reply Quote 0
                    • A
                      ayoub92400
                      last edited by

                      I found the "allowed IP address" section but still no interent.

                      I made a Nslookup to www.google.fr but I have a DNS request timeout.

                      1 Reply Last reply Reply Quote 0
                      • GertjanG
                        Gertjan
                        last edited by

                        @ayoub92400:

                        My AP are on 192.168.10.0.  They are located on vlans which allow communication.

                        Why are they not on LAN1 segment ?
                        Example 192.168.6.2.

                        My AP's are all on the OPT1 segment (my Portal interface NIC)
                        pfSense is 192.168.2.1 (= NIC OPT1).
                        AP1 = 192.168.2.2 DNS = 192.168.2.1 Gateway = 192.168.2.1
                        AP2 = 192.168.2.3 DNS = 192.168.2.1 Gateway = 192.168.2.1
                        AP3 = 192.168.2.4 DNS = 192.168.2.1 Gateway = 192.168.2.1

                        Of course, these AP's have SSH and GUI access, but there internal firewalled so that thy only accepts connection from 192.168.2.1
                        I can administer these AP's just fine from my LAN (192.168.1.0/24) segment - our Portal visitors can't access our AP's administration ports.

                        Bonus: all AP's are enforced to allow a connections from ANY (client) to pfSEnse (192.168.2.1) - no where else, so clients can't see the shared drives of other clients.

                        @ayoub92400:

                        They have no  gateway configured because we can't do that on those APs…

                        So, a radio (Wifi) connection comes in.
                        How should it know where to send the packets to ?

                        No "help me" PM's please. Use the forum, the community will thank you.
                        Edit : and where are the logs ??

                        1 Reply Last reply Reply Quote 0
                        • A
                          ayoub92400
                          last edited by

                          I can't do it because I have multiple networks .

                          My APs are not used only for Pfsense they are also used for users who wants to connect via a radius server located on another network.

                          So I had to give a network only for my APs. :-\

                          The APs are tagged on multiple vlans that includes the Pfsense ones.

                          1 Reply Last reply Reply Quote 0
                          • D
                            doktornotor Banned
                            last edited by

                            @ayoub92400:

                            The APs are tagged on multiple vlans that includes the Pfsense ones.

                            Good to mention after two days… Sigh.  ::)

                            Produce some network diagram with complete information. Enough time wasted already.

                            1 Reply Last reply Reply Quote 0
                            • A
                              ayoub92400
                              last edited by

                              Here is a schema to illustrate

                              Net.png
                              Net.png_thumb

                              1 Reply Last reply Reply Quote 0
                              • D
                                doktornotor Banned
                                last edited by

                                Sorry, I cannot make anything useful out of that.

                                1 Reply Last reply Reply Quote 0
                                • A
                                  ayoub92400
                                  last edited by

                                  Sorry  :-\ what king of information do you need?

                                  1 Reply Last reply Reply Quote 0
                                  • D
                                    doktornotor Banned
                                    last edited by

                                    Please, review this example. From the diagram you posted, I cannot even see what's connected where (WAN, LANx), let alone the IPs/subnets, VLANs, etc.

                                    1 Reply Last reply Reply Quote 0
                                    • A
                                      ayoub92400
                                      last edited by

                                      Okay let me know if it's good or not

                                      Net.png
                                      Net.png_thumb

                                      1 Reply Last reply Reply Quote 0
                                      • D
                                        doktornotor Banned
                                        last edited by

                                        Yeah it's awesome except that we again lost the VLANs…

                                        1 Reply Last reply Reply Quote 0
                                        • A
                                          ayoub92400
                                          last edited by

                                          oups…

                                          Net.png
                                          Net.png_thumb

                                          1 Reply Last reply Reply Quote 0
                                          • A
                                            ayoub92400
                                            last edited by

                                            Hi everybody,

                                            just to tell you you that I'vez changed my NAT configuration on my Netasq and now it's working for the network which is in 192.168.6.0.

                                            My other network on 192.168.110.0 still have no CP and no Internet.

                                            This interface has been set on OPT1 I don't know if it can explain that…

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.