Help! Wireless AP setup - local network connection ok but no internet connection

[ptt]

Add the NAT rule for your "WIFI" net… Or change the NAT to "Auto"

[Soyokaze]

1st: kudos for providing all necessary info (including network diagram! wow!).
2nd: @ptt says it right - you don't have NAT rule for packets from your wifi network (10.20.2.0/24) through WAN interface.

[bucks]

Thank you for your kind responses.  I have to set my NAT to 'Manual' for my vpn (assuming your referring to the Firewall–>NAT-->Outbound-->Outbound NAT Mode).

If I understand correctly, I've added a rule to the WAN interface (see image). After that, I still have no internet connection.  I've even added the same rule (see same image) to the LAN and WIFI interface (Firewall-->Rules) as well.

None of the IP in the WIFI range even shows up in Status-->System Logs-->Firewall.

I'm apologize, but can you explain how to do that?  Networking is my kryptonite, but I've been learning as much as I can.

Kind Regards

[johnpoz]

"I have to set my NAT to 'Manual' for my vpn (assuming your referring to the Firewall–>NAT-->Outbound-->Outbound NAT Mode)."

No not really.. Hybrid would of worked that allows you to create your own special outbound nats for like vpn but auto create for your local interfaces to the internet, etc.

[bucks]

Thanks johnpoz for clarifying that I just followed the setup instructions on the vpn site.

Unfortunately, I still have the same issue when I selected hybrid (and restarted pc just to be safe).  I can connect to the wifi interface but no internet still.

Now it's on Hybrid mode, do I still need to configure rules to allow packets?

I appreciate your help.

Kind Regards

[Derelict]

Duplicate the LAN pass any any rule on the WIFI interface. Change the interface and the source network to WIFI, of course.

[bucks]

Thanks Derelict for the info.

That was one of the first thing I tried - I even restarted the firewall for safe measures.

Anything else I can try?

[Soyokaze]

Add rule on wifi interface to allow trafic from wifi network to any?

[bucks]

I believe that's the rule I had in there already, correct me if I'm wrong.

What worked for me is setting the gateway to 'WAN_DHCP' instead of leaving it as default.  This is what I wanted to achieve.

Thanks everyone for your input.

Kind Regards

B

[Derelict]

That would only be necessary if that gateway is not your default gateway.

[bucks]

Weird, the wan is my default gateway.

[Derelict]

Perhaps one of those VPN services is pushing a set of default routes.

If you don't want to route all traffic all the time out a VPN client it is probably best to check don't pull routes there and policy route just what you want out of it. Else you have to understand that the VPN is your default gateway.