Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    No internet access, but webgui works

    Scheduled Pinned Locked Moved Virtualization
    90 Posts 4 Posters 28.9k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • I
      itsignas
      last edited by

      @KOM:

      OK now we're getting somewhere.  The one that work sis using pfSense as its DNS.  In pfSense, are you using the Forwarder or Resolver?  Look under Services at each one and see which one is enabled.  For the one that's enabled, what do you have set for Networks Interfaces / Interfaces?

      Here it is.

      ![dns resolver general settings.png](/public/imported_attachments/1/dns resolver general settings.png)
      ![dns resolver general settings.png_thumb](/public/imported_attachments/1/dns resolver general settings.png_thumb)
      ![dns forwarder off.png](/public/imported_attachments/1/dns forwarder off.png)
      ![dns forwarder off.png_thumb](/public/imported_attachments/1/dns forwarder off.png_thumb)

      1 Reply Last reply Reply Quote 0
      • KOMK
        KOM
        last edited by

        OK, run nslookup again and this time type server 192.168.3.1 then try to resolve youtube.com.  What happens?

        1 Reply Last reply Reply Quote 0
        • I
          itsignas
          last edited by

          @KOM:

          OK, run nslookup again and this time type server 192.168.3.1 then try to resolve youtube.com.  What happens?

          Here

          Screenshot_2.png
          Screenshot_2.png_thumb

          1 Reply Last reply Reply Quote 0
          • KOMK
            KOM
            last edited by

            OK.  I'm not sure why your pfSense LAN IP is 192.168.1.1, but you can resolve hosts via 192.168.1.254.  Can you take a new screen of your pfSense console view (the one that lists the NICs and the menu showing options form 0 to 15)?

            1 Reply Last reply Reply Quote 0
            • I
              itsignas
              last edited by

              @KOM:

              OK.  I'm not sure why your pfSense LAN IP is 192.168.1.1, but you can resolve hosts via 192.168.1.254.  Can you take a new screen of your pfSense console view (the one that lists the NICs and the menu showing options form 0 to 15)?

              Alright

              Screenshot_1.png
              Screenshot_1.png_thumb

              1 Reply Last reply Reply Quote 0
              • KOMK
                KOM
                last edited by

                My mistake, you weren't resolving use 192.168.1.254.  Your OPT1 link was resolving using 212.59.8.8.  So why can't LAN resolve using the same DNS server?  I'm starting to run out of ideas here.  It should just work.

                1 Reply Last reply Reply Quote 0
                • I
                  itsignas
                  last edited by

                  @KOM:

                  My mistake, you weren't resolving use 192.168.1.254.  Your OPT1 link was resolving using 212.59.8.8.  So why can't LAN resolve using the same DNS server?  I'm starting to run out of ideas here.  It should just work.

                  That's the problem. Im just thinking that esxi is overriding dns server?

                  Screenshot_1.png
                  Screenshot_1.png_thumb

                  1 Reply Last reply Reply Quote 0
                  • KOMK
                    KOM
                    last edited by

                    No, that has nothing to do with it.  Usually, your public link to your ISP is a 100 Mbit connection , and LAN connections are Gigabit.  In your case though, your public is Gigabit and LAN is 100 Mbit.  I'm wondering if you have your vSwitches defined incorrectly.  Pull the plug on your cable to your ISP and then check which interface in vi-client shows as being disconnected.

                    1 Reply Last reply Reply Quote 0
                    • I
                      itsignas
                      last edited by

                      @KOM:

                      No, that has nothing to do with it.  Usually, your public link to your ISP is a 100 Mbit connection , and LAN connections are Gigabit.  In your case though, your public is Gigabit and LAN is 100 Mbit.  I'm wondering if you have your vSwitches defined incorrectly.  Pull the plug on your cable to your ISP and then check which interface in vi-client shows as being disconnected.

                      Well yes, my win xp machine is netbook, so it have only 100mbit connection, don't support gigabit.

                      1 Reply Last reply Reply Quote 0
                      • KOMK
                        KOM
                        last edited by

                        I'm talking about your ESXi host.  ESXi seems to have Gigabit to your ISP and OPT1, but 100 Mbit to LAN.  That is unusual.  You don't have your XP laptop connected directly into the ESXi host, do you?  It should be plugged into a switch that is also plugged into ESXi, unless you're using a crossover cable.

                        1 Reply Last reply Reply Quote 0
                        • I
                          itsignas
                          last edited by

                          @KOM:

                          I'm talking about your ESXi host.  ESXi seems to have Gigabit to your ISP and OPT1, but 100 Mbit to LAN.  That is unusual.  You don't have your XP laptop connected directly into the ESXi host, do you?  It should be plugged into a switch that is also plugged into ESXi, unless you're using a crossover cable.

                          Actually I do…

                          OPT1 goes to my switch which is connected to the my pc, which works okay.
                          But LAN doesn't as we trying to figure it out few hours now.

                          ![IMG_20160303_215650 – kopija (2).jpg](/public/imported_attachments/1/IMG_20160303_215650 – kopija (2).jpg)
                          ![IMG_20160303_215650 – kopija (2).jpg_thumb](/public/imported_attachments/1/IMG_20160303_215650 – kopija (2).jpg_thumb)

                          1 Reply Last reply Reply Quote 0
                          • KOMK
                            KOM
                            last edited by

                            I'm getting confused.  Your XP PC was on LAN, I thought, since that is the one that can't resolve IP addresses.  Maybe you could draw me a simple network diagram to show what is connected where?

                            1 Reply Last reply Reply Quote 0
                            • I
                              itsignas
                              last edited by

                              @KOM:

                              I'm getting confused.  Your XP PC was on LAN, I thought, since that is the one that can't resolve IP addresses.  Maybe you could draw me a simple network diagram to show what is connected where?

                              Okay, im not great at these things, i'll attach photo too.

                              mhm.png
                              mhm.png_thumb
                              1.png
                              1.png_thumb

                              1 Reply Last reply Reply Quote 0
                              • KOMK
                                KOM
                                last edited by

                                If I'm understanding this diagram, you have your WinXP box plugged directly into your ESXi hosts's network port?  That won't work.

                                1 Reply Last reply Reply Quote 0
                                • I
                                  itsignas
                                  last edited by

                                  @KOM:

                                  If I'm understanding this diagram, you have your WinXP box plugged directly into your ESXi hosts's network port?  That won't work.

                                  Well, but I can access esxi management and pfSense from it. That problem with dns, that we are having here

                                  1 Reply Last reply Reply Quote 0
                                  • KOMK
                                    KOM
                                    last edited by

                                    Unless the cable you're using is a crossover cable, it shouldn't work at all and I don't understand why it's working as much as it is.  Do you have access to another switch or hub that you could put between ESXi and WinXP?  Otherwise I'm out of ideas.

                                    1 Reply Last reply Reply Quote 0
                                    • johnpozJ
                                      johnpoz LAYER 8 Global Moderator
                                      last edited by

                                      Ok I am completely confused here..  You have pfsense running as vm on esxi host, that is how I read your first post.

                                      But in your drawing it sure looks like its outside your host.  Please post up your vswitch configuration.  I have been running pfsense on esxi for years and its really straight forward.  And yes you can run your vmkern on any network you want.

                                      How many nics does your esxi host have?  What version is?  Since current pfsense is not really supported until its at min 5.5u2

                                      See example of my vswitches.

                                      have to run, so this is cut short please post up a screenshot of your vswitch and how they are connected to the physical world.

                                      esxinetwork.png
                                      esxinetwork.png_thumb

                                      An intelligent man is sometimes forced to be drunk to spend time with his fools
                                      If you get confused: Listen to the Music Play
                                      Please don't Chat/PM me for help, unless mod related
                                      SG-4860 24.11 | Lab VMs 2.8, 24.11

                                      1 Reply Last reply Reply Quote 0
                                      • KOMK
                                        KOM
                                        last edited by

                                        He posted that here:

                                        https://forum.pfsense.org/index.php?topic=107735.msg600202#msg600202

                                        His diagram is meant to show pfSense as a VM inside ESXi.

                                        Thanks for chiming in.  I appreciate another set of eyes with this one as there may have been something I've missed.  I'm helping a few other ppl and it's busy at work today so my head is spinning a bit.

                                        1 Reply Last reply Reply Quote 0
                                        • johnpozJ
                                          johnpoz LAYER 8 Global Moderator
                                          last edited by

                                          Ok that makes sense, other than he has his win7 vm in both his wan and lan switch?

                                          And the physical nic vmnic2 is not connected, and don't show any vms on the this opt network..

                                          And in that same pic of showing the pfsense console em0 or his wan has no IP listed.  How exactly is this XP box being connected?? And he shows in that drawing his router/switch is I take it is old wifi router being used as AP is connected to opt, but clearly that is not the case since in his vswitch pic nothing is connected to opt.

                                          This is really pretty basic stuff..  Here I drew it up, don't see why the win7 box is connected to both wan and lan..  Makes NO Sense at all!!!

                                          And don't understand how connecting this XP machine - really needs to be another switch involved if just using some wifi router as AP that most likely has no vlan support, etc.

                                          Is this how your connected?  Other than your win7 machine most likely causing you problems getting an IP from your ISP.. this is all straight forward.

                                          Pfsense gets wan IP from your isp.  You have 2 networks on lan and opt, 192.168.1.0/24 and 192.168.2.0/24 – all devices point to pfsense for gateway and dns via dhcp they get from pfsense.  Your done..  So what is not working exactly??  I tried to follow the thread but it was all over the place!!  So lets start from a clean slate..  Validate this is how your setup, what your pfsense wan IP is - and remove that win7 vm from your wan vswitch.

                                          setup.png
                                          setup.png_thumb

                                          An intelligent man is sometimes forced to be drunk to spend time with his fools
                                          If you get confused: Listen to the Music Play
                                          Please don't Chat/PM me for help, unless mod related
                                          SG-4860 24.11 | Lab VMs 2.8, 24.11

                                          1 Reply Last reply Reply Quote 0
                                          • I
                                            itsignas
                                            last edited by

                                            @johnpoz:

                                            Ok that makes sense, other than he has his win7 vm in both his wan and lan switch?

                                            And the physical nic vmnic2 is not connected, and don't show any vms on the this opt network..

                                            And in that same pic of showing the pfsense console em0 or his wan has no IP listed.  How exactly is this XP box being connected?? And he shows in that drawing his router/switch is I take it is old wifi router being used as AP is connected to opt, but clearly that is not the case since in his vswitch pic nothing is connected to opt.

                                            This is really pretty basic stuff..  Here I drew it up, don't see why the win7 box is connected to both wan and lan..  Makes NO Sense at all!!!

                                            And don't understand how connecting this XP machine - really needs to be another switch involved if just using some wifi router as AP that most likely has no vlan support, etc.

                                            Is this how your connected?  Other than your win7 machine most likely causing you problems getting an IP from your ISP.. this is all straight forward.

                                            Pfsense gets wan IP from your isp.  You have 2 networks on lan and opt, 192.168.1.0/24 and 192.168.2.0/24 – all devices point to pfsense for gateway and dns via dhcp they get from pfsense.  Your done..  So what is not working exactly??  I tried to follow the thread but it was all over the place!!  So lets start from a clean slate..  Validate this is how your setup, what your pfsense wan IP is - and remove that win7 vm from your wan vswitch.

                                            That was bit older photos, here it is new one. Problem not with win7, just saying, that my OPT1 goes to old router as AP for wi-fi and few more ports. The problem is windows xp don't have internet access, it is connected trough pfSense, but management network is connected trough that port too. My xp machine has 100mb/s network so don't say it's not gigabit.

                                            Screenshot 2, is my router AP. (Just to say so)

                                            Screenshot_1.png
                                            Screenshot_1.png_thumb
                                            Screenshot_2.png
                                            Screenshot_2.png_thumb

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.