Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    No internet access, but webgui works

    Scheduled Pinned Locked Moved Virtualization
    90 Posts 4 Posters 28.9k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • KOMK
      KOM
      last edited by

      Since we have already confirmed that you can go places based on the IP address, it's definitely a DNS problem.  However, use of manual DNS seems to fail.  Is it possible your ISP is blocking the use of external DNS servers?  In pfSense, what do you have for System - General Setup - DNS Servers?

      1 Reply Last reply Reply Quote 0
      • I
        itsignas
        last edited by

        @KOM:

        Since we have already confirmed that you can go places based on the IP address, it's definitely a DNS problem.  However, use of manual DNS seems to fail.  Is it possible your ISP is blocking the use of external DNS servers?  In pfSense, what do you have for System - General Setup - DNS Servers?

        http://prntscr.com/aarycx
        http://prntscr.com/aaryi4
        http://prntscr.com/aaryo9

        Here you go

        1 Reply Last reply Reply Quote 0
        • KOMK
          KOM
          last edited by

          Next test: on your client, set DNS manually to 212.59.8.8 and try again.  BTW you can embed images directly into your posts here without having to upload them to some 3rd-party site and then link to them.

          1 Reply Last reply Reply Quote 0
          • I
            itsignas
            last edited by

            @KOM:

            Next test: on your client, set DNS manually to 212.59.8.8 and try again.  BTW you can embed images directly into your posts here without having to upload them to some 3rd-party site and then link to them.

            Same :/

            7kJ6k4k.png
            7kJ6k4k.png_thumb

            1 Reply Last reply Reply Quote 0
            • KOMK
              KOM
              last edited by

              So bizarre.  Try this.  On your XP client, run a Command Prompt.  Type nslookup and press enter.  Type server 212.59.8.8 and press enter.  Type youtube.com and press enter.  What happens?  When I try it here, your 212.59.8.8 DNS server times out, but that might be because I'm not on their network.  Does it time out for you too?  If so, type server 8.8.8.8 and press enter.  Type youtube.com and press enter.  What happens?

              1 Reply Last reply Reply Quote 0
              • I
                itsignas
                last edited by

                @KOM:

                So bizarre.  Try this.  On your XP client, run a Command Prompt.  Type nslookup and press enter.  Type server 212.59.8.8 and press enter.  Type youtube.com and press enter.  What happens?  When I try it here, your 212.59.8.8 DNS server times out, but that might be because I'm not on their network.  Does it time out for you too?  If so, type server 8.8.8.8 and press enter.  Type youtube.com and press enter.  What happens?

                Mhmm. That's weird. Attaching photos.
                Second is from my other lan (OPT1)

                11111111111.png
                11111111111.png_thumb
                222222222.png
                222222222.png_thumb

                1 Reply Last reply Reply Quote 0
                • KOMK
                  KOM
                  last edited by

                  OK now we're getting somewhere.  The one that work sis using pfSense as its DNS.  In pfSense, are you using the Forwarder or Resolver?  Look under Services at each one and see which one is enabled.  For the one that's enabled, what do you have set for Networks Interfaces / Interfaces?

                  1 Reply Last reply Reply Quote 0
                  • I
                    itsignas
                    last edited by

                    @KOM:

                    OK now we're getting somewhere.  The one that work sis using pfSense as its DNS.  In pfSense, are you using the Forwarder or Resolver?  Look under Services at each one and see which one is enabled.  For the one that's enabled, what do you have set for Networks Interfaces / Interfaces?

                    Here it is.

                    ![dns resolver general settings.png](/public/imported_attachments/1/dns resolver general settings.png)
                    ![dns resolver general settings.png_thumb](/public/imported_attachments/1/dns resolver general settings.png_thumb)
                    ![dns forwarder off.png](/public/imported_attachments/1/dns forwarder off.png)
                    ![dns forwarder off.png_thumb](/public/imported_attachments/1/dns forwarder off.png_thumb)

                    1 Reply Last reply Reply Quote 0
                    • KOMK
                      KOM
                      last edited by

                      OK, run nslookup again and this time type server 192.168.3.1 then try to resolve youtube.com.  What happens?

                      1 Reply Last reply Reply Quote 0
                      • I
                        itsignas
                        last edited by

                        @KOM:

                        OK, run nslookup again and this time type server 192.168.3.1 then try to resolve youtube.com.  What happens?

                        Here

                        Screenshot_2.png
                        Screenshot_2.png_thumb

                        1 Reply Last reply Reply Quote 0
                        • KOMK
                          KOM
                          last edited by

                          OK.  I'm not sure why your pfSense LAN IP is 192.168.1.1, but you can resolve hosts via 192.168.1.254.  Can you take a new screen of your pfSense console view (the one that lists the NICs and the menu showing options form 0 to 15)?

                          1 Reply Last reply Reply Quote 0
                          • I
                            itsignas
                            last edited by

                            @KOM:

                            OK.  I'm not sure why your pfSense LAN IP is 192.168.1.1, but you can resolve hosts via 192.168.1.254.  Can you take a new screen of your pfSense console view (the one that lists the NICs and the menu showing options form 0 to 15)?

                            Alright

                            Screenshot_1.png
                            Screenshot_1.png_thumb

                            1 Reply Last reply Reply Quote 0
                            • KOMK
                              KOM
                              last edited by

                              My mistake, you weren't resolving use 192.168.1.254.  Your OPT1 link was resolving using 212.59.8.8.  So why can't LAN resolve using the same DNS server?  I'm starting to run out of ideas here.  It should just work.

                              1 Reply Last reply Reply Quote 0
                              • I
                                itsignas
                                last edited by

                                @KOM:

                                My mistake, you weren't resolving use 192.168.1.254.  Your OPT1 link was resolving using 212.59.8.8.  So why can't LAN resolve using the same DNS server?  I'm starting to run out of ideas here.  It should just work.

                                That's the problem. Im just thinking that esxi is overriding dns server?

                                Screenshot_1.png
                                Screenshot_1.png_thumb

                                1 Reply Last reply Reply Quote 0
                                • KOMK
                                  KOM
                                  last edited by

                                  No, that has nothing to do with it.  Usually, your public link to your ISP is a 100 Mbit connection , and LAN connections are Gigabit.  In your case though, your public is Gigabit and LAN is 100 Mbit.  I'm wondering if you have your vSwitches defined incorrectly.  Pull the plug on your cable to your ISP and then check which interface in vi-client shows as being disconnected.

                                  1 Reply Last reply Reply Quote 0
                                  • I
                                    itsignas
                                    last edited by

                                    @KOM:

                                    No, that has nothing to do with it.  Usually, your public link to your ISP is a 100 Mbit connection , and LAN connections are Gigabit.  In your case though, your public is Gigabit and LAN is 100 Mbit.  I'm wondering if you have your vSwitches defined incorrectly.  Pull the plug on your cable to your ISP and then check which interface in vi-client shows as being disconnected.

                                    Well yes, my win xp machine is netbook, so it have only 100mbit connection, don't support gigabit.

                                    1 Reply Last reply Reply Quote 0
                                    • KOMK
                                      KOM
                                      last edited by

                                      I'm talking about your ESXi host.  ESXi seems to have Gigabit to your ISP and OPT1, but 100 Mbit to LAN.  That is unusual.  You don't have your XP laptop connected directly into the ESXi host, do you?  It should be plugged into a switch that is also plugged into ESXi, unless you're using a crossover cable.

                                      1 Reply Last reply Reply Quote 0
                                      • I
                                        itsignas
                                        last edited by

                                        @KOM:

                                        I'm talking about your ESXi host.  ESXi seems to have Gigabit to your ISP and OPT1, but 100 Mbit to LAN.  That is unusual.  You don't have your XP laptop connected directly into the ESXi host, do you?  It should be plugged into a switch that is also plugged into ESXi, unless you're using a crossover cable.

                                        Actually I do…

                                        OPT1 goes to my switch which is connected to the my pc, which works okay.
                                        But LAN doesn't as we trying to figure it out few hours now.

                                        ![IMG_20160303_215650 – kopija (2).jpg](/public/imported_attachments/1/IMG_20160303_215650 – kopija (2).jpg)
                                        ![IMG_20160303_215650 – kopija (2).jpg_thumb](/public/imported_attachments/1/IMG_20160303_215650 – kopija (2).jpg_thumb)

                                        1 Reply Last reply Reply Quote 0
                                        • KOMK
                                          KOM
                                          last edited by

                                          I'm getting confused.  Your XP PC was on LAN, I thought, since that is the one that can't resolve IP addresses.  Maybe you could draw me a simple network diagram to show what is connected where?

                                          1 Reply Last reply Reply Quote 0
                                          • I
                                            itsignas
                                            last edited by

                                            @KOM:

                                            I'm getting confused.  Your XP PC was on LAN, I thought, since that is the one that can't resolve IP addresses.  Maybe you could draw me a simple network diagram to show what is connected where?

                                            Okay, im not great at these things, i'll attach photo too.

                                            mhm.png
                                            mhm.png_thumb
                                            1.png
                                            1.png_thumb

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.