Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    No Internet after initial pf sense configuration

    Scheduled Pinned Locked Moved General pfSense Questions
    21 Posts 6 Posters 2.8k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • T
      the_jaeger @stephenw10
      last edited by

      @stephenw10 with the ap connected, I could connect wirelessly, but I would not receive internet or could access the web gui. Wired into the lan i can access the web gui but not the internet. Either connection can be pinged from the pfsense box however

      1 Reply Last reply Reply Quote 0
      • stephenw10S
        stephenw10 Netgate Administrator
        last edited by

        If you can connect out from pfSense by IP or FQDN but not from a client behind it that's usually a NAT problem.

        The default setting for outbound NAT is automatic which should work here unless you have changed it.

        Otherwise it looks like a subnet conflict.

        Which port of the TP-Link did you connect? It has to be one of the internal ports. It's WAN port should be unconnected. 192.168.1.2 should be on its internal interface.
        https://www.netgate.com/docs/pfsense/wireless/use-an-existing-wireless-router-with-pfsense.html

        Steve

        T 1 Reply Last reply Reply Quote 0
        • JKnottJ
          JKnott
          last edited by

          @the_jaeger said in No Internet after initial pf sense configuration:

          and my ISP's DHCP

          How do you configure for an ISP's DHCP? You either enable DHCP or configure for a static address. Beyond enabling it, there's nothing else to configure for DHCP..

          PfSense running on Qotom mini PC
          i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
          UniFi AC-Lite access point

          I haven't lost my mind. It's around here...somewhere...

          1 Reply Last reply Reply Quote 0
          • T
            the_jaeger @stephenw10
            last edited by

            @stephenw10 I've already looked at Netgate's documentation on the connection between the devices. I think the TP-link ap is working fine and doing its job. Where I make my emphasis is that even with my ap disconnected and my laptop connected to the lan of the pfsense box, I still cannot connect to the internet; its definitely isolated to whatever the pfsense's config is.

            Although I did change the static ip of the TP-link, before connecting it to the lan of the pfsense, to 192.168.1.2 and even when I changed the default interface config of the pfsense lan from 1.1 to 1.2 it still showed no difference anywhere.

            I did not adjust the NAT at configuration

            1 Reply Last reply Reply Quote 0
            • T
              the_jaeger
              last edited by

              @jknott DHCP is what I meant

              1 Reply Last reply Reply Quote 0
              • stephenw10S
                stephenw10 Netgate Administrator
                last edited by

                You seem to have two separate problems though.

                You get not external access from a client on the LAN.

                Wireless clients cannot connect to the pfSense GUI even.

                I was attemptiong to address the second which only seems likely if the TP-Link is actually still routing in some way rather than acting as a pure layer 2 AP.

                Steve

                T 1 Reply Last reply Reply Quote 0
                • T
                  the_jaeger @stephenw10
                  last edited by

                  @stephenw10 But I already stated that I still have these issues when the TP-link router isn't even connected to the pfsense box and I'm wired in to pfsense. I think it might be a NAT or DNS issue since it's isolated to pfsense and it gives me the "the website could not be found or changed ip" when I try to access the internet, but I don't know what would be wrong besides leaving the DNS blank and not using Google's DNS on the default config, but I've seen this done and it work flawlessly. @Raffi_ also mentioned the private ip issue, but that was the default config given by pfsense.

                  I disabled the DHCP completely on the TP-link before I ever connected it to the pfsense box and I only connected it to the LAN. Though at first I did connect it to the wan of the TP-link during the very first configuration; but I factory reset it, disabled dhcp, set the static ip, and then connected it correctly to the pfsense. I did not try to connect to the gui or the internet during that period.

                  1 Reply Last reply Reply Quote 0
                  • GrimsonG
                    Grimson Banned
                    last edited by

                    Show your config with screenshots, or it's just wild guessing here.

                    1 Reply Last reply Reply Quote 0
                    • stephenw10S
                      stephenw10 Netgate Administrator
                      last edited by

                      Yes, we need to see your setup.

                      I would still say that you have two separate issues there. If you can open the pfSense gui from a wired connection you should also be able to from a wireless connection with the TP-Link connected to the same intrerface. If you can't then it's not acting as a pure AP.

                      Steve

                      1 Reply Last reply Reply Quote 0
                      • chpalmerC
                        chpalmer
                        last edited by

                        The wan and lan of the tp box cannot be in the same subnet.. unless that device has a "bridge mode"..

                        Triggering snowflakes one by one..
                        Intel(R) Core(TM) i5-4590T CPU @ 2.00GHz on an M400 WG box.

                        1 Reply Last reply Reply Quote 0
                        • T
                          the_jaeger
                          last edited by

                          @Grimson @Raffi_ @stephenw10 a private ip is also used for wan for the TP-link router when used as my regular router and works over a public ip for the lan just fine. That limits it to the firewall or NAT issue

                          1 Reply Last reply Reply Quote 0
                          • stephenw10S
                            stephenw10 Netgate Administrator
                            last edited by

                            Ok, then we need to see how it's configured to offer more.

                            Steve

                            1 Reply Last reply Reply Quote 0
                            • T
                              the_jaeger
                              last edited by

                              @Grimson @Raffi_ @stephenw10 Update: the entire problem was registering the mac add to the ISP. I'm receiving full internet capabilities, but now I'm running into a new obstacle. I've configured the admin access to allow more than one device access it and anytime I try to access it from another device besides the laptop I was wired to, it will not let me. I'm also unable to connect to the internet with my phone

                              1 Reply Last reply Reply Quote 0
                              • stephenw10S
                                stephenw10 Netgate Administrator
                                last edited by

                                @the_jaeger said in No Internet after initial pf sense configuration:

                                I've configured the admin access to allow more than one device access it

                                Not entirely sure what you mean by that. Can you be more specific about where that setting is and what you set it to?

                                Steve

                                T 1 Reply Last reply Reply Quote 0
                                • T
                                  the_jaeger @stephenw10
                                  last edited by

                                  @stephenw10 I live in an apartment and with my subscription, anytime that a new router is introduced to the wan, it's mac address must be registered with the ISP before that device receives an active connection to the internet.

                                  it works now, but now I have the issue of all cell phones that connect to internet take 5 minutes to finally connect. Would port forwarding solve this issue or at least mitigate it?

                                  1 Reply Last reply Reply Quote 0
                                  • Raffi_R
                                    Raffi_
                                    last edited by

                                    @the_jaeger I'm also confused by what you mean on the limited admin access. Do you mean admin access to pfSense or the TP-link ap? Please be more specific.

                                    Can a device wired directly into the TP-link ap get internet access immediately? Is it only a wireless device which has a delay before it can access the web?

                                    1 Reply Last reply Reply Quote 0
                                    • stephenw10S
                                      stephenw10 Netgate Administrator
                                      last edited by

                                      Port forwarding will not help at all with outbound connectivity.

                                      How are they failing? Unable to resolve IPs? No route to host? Just timing out?

                                      Steve

                                      1 Reply Last reply Reply Quote 0
                                      • First post
                                        Last post
                                      Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.