Webgui locked to hardware address?
-
I installed a 4 port card on my pfSense box, reassigned interfaces and now I can no longer login to the webgui. It works fine with no issues but need to login to make some changes and now I can't. I rebooted it last night figuring it just needed it, but today still can't get in. I haven't had the time to swap back to the old interfaces but is there a reason I am not getting a response?
-
Wild guess : the 'LAN' you were using wasn't LAN, but OPT1, 2 or 3.
Only the LAN port has the default 'anti-lockout' rule. All the OPTx interface have no rules, so nothing gets in … -
"I rebooted it last night figuring it just needed it"
It isn't running on windows 95 ;) hehehe.. Only time you should have to reboot pfsense is update or patch of itself. Bios update of the hardware.. Need to change some hardware.. Other than you should not ever have reboot it.
-
It only had 2 ports prior to adding the card, but I did remove a card and install a new one. I reassigned only 2 of the 5 total ports.
I'll double check assignments when I get home but if all my port forwarding rules still work properly I highly doubt that's it. I'm nor having any connectivity issues, just the webgui. Console was fine and indicated my last login was in April, but that means it was on this hardware… Which is now leading me to the card as I type.
-
If you can not get to the gui, what is the rules on your lan interface? As mentioned the antilock out should prevent you from creating a rule that prevents gui access/ssh access on your lan.
From the console can you validate that gui is running.. You restart it/reset its password and port, etc.
-
Well I can be sure it wasn't a rule that was created that blocks me out, and the console was active and let me reboot cause it couldn't hurt. I didn't think to try making changes to the webgui from the console at the time.
I didn't check the interface assignments yet but last time I used it all was fine until about 3 days ago when I wanted to login to make a rule change now I get no response from http or https on multiple computers/browsers.
Is ssh enabled by default? I may try to ssh to it. The only configuration I have done was swapped from Static WAN to DHCP and setup Dynamic DNS. I had to change my static routes from my block of 5 addresses to a dynamic wan, but no real change on the LAN side.
My other thought that I had forgotten about is my switch, it's a Netgear 24 port and I have had 1 issue with it in the past where I'm about 80% sure it had blocked me from gaining access to my storage server IPMI.
-
Verified LAN/WAN ports. Now I am wondering if I changed the port to not conlict with my webserver, that is probably what i did without writing it down… :(
-
Yep… this can be ignored...
I really can't believe I changed the port without writing it down. I was able to ssh in and vi the config.xml to see what I had done.
Shame, Shame, Shame. (sorry just re-watched the series in anticipation)
