Cant access wifi ap webgui

mkk88

Hello guys.

I am having issues properly configuring my APs on my network which is:

Modem-pfsense- 24 port managed switch

Pfsense 192.168.1.2
Vlan 101 (local) 192.168.101.1 dhcp 101.100-101.254
Vlan 102 (guest) 192.168.102.1 dhcp 102.100-102.254

I plugged in wifi APs directly to designated ports on a switch and Vlans are working correctly.

One AP has static IP 192.168.101.2
Other AP has static IP 192.168.102.2 (both static ips set in wifi devices and DHCP is off on both)

Clients can connect to both APs and get correct IPs from Pfsense.

Problem: i cannot access APs webgui using static address. Typing 192.168.102.2 redirects me to PFsense webgui..
I also cant locate AP anywere in pfsense logs (dhcp leases)..

How can i access all webgui of APs?

Ojisang

Me too I can't access GUI. Please help :'(

Snailkhan

@Ojisang:

Me too I can't access GUI. Please help :'(

can you ping it from same valn ? other vlan ?
what if you explicitly specify the port in url ?
is default gateway assigned on your ap ?

whats the make/model of ap ? any screenshot of the ip specified on that ?

johnpoz

"Typing 192.168.102.2 redirects me to PFsense webgui.."

That makes no sense, seems like you state the pfsense IP on that vlan for example is 192.168.102.1 ??

Are you doing any redirects or running proxy? Do you have a gateway setup on the AP? To access the AP gui you would need the AP to be able to talk off its segment/vlan - ie a gateway on the AP pointing to pfsense.. Maybe wifi routers that you try and turn into an AP do not support gateways on their lan interfaces.. so they have to be managed from the same segment.

Also you would need firewall rules that allow the traffic from where you want to manage to the vlan your wanting to access the AP on, etc..

Ojisang

@Snailkhan:

@Ojisang:

Me too I can't access GUI. Please help :'(

can you ping it from same valn ? other vlan ?
what if you explicitly specify the port in url ?
is default gateway assigned on your ap ?

whats the make/model of ap ? any screenshot of the ip specified on that ?

I could not ping on same VLAN.
I could not ping on other VLAN.
I will try adding port.
Gateway was assigned on my AP and I could use wifi.

Wifi AP is CD R King type I'm not sure about the model though (Sorry very cheap AP)
Sorry, I'll try to add screenshots if I have time. Thank you for your reply

johnpoz

"I could not ping on same VLAN."

If your on the same vlan and you can not ping it… WTF does that have to do with pfsense...

Guest

I could not ping on same VLAN.

Is the client isolation (in pfSense) for WLAN clients are activated?

I could not ping on other VLAN.

This is mostly a good idea or should all your guests go around and expedite your entire LAN with
all of its devices?

I will try adding port.

For what? Change perhaps better the rules for the VLANs and that it!

Gateway was assigned on my AP and I could use wifi.

??? I don´t really know what you want to tell us with this words, but please
accept that you should perhaps draw a small network schematic for us that we will being
able to understand your entire network topology.

Wifi AP is CD R King type I'm not sure about the model though (Sorry very cheap AP)

Original firmware or DD-WRT or OpenWRT or Tomato based firmware?

Sorry, I'll try to add screenshots if I have time. Thank you for your reply

Is this cheap WiFi AP supporting VLANs?

Modem-pfsense- 24 port managed switch

Layer2 or Layer3 Switch?

Pfsense 192.168.1.2
Vlan 101 (local) 192.168.101.1 dhcp 101.100-101.254
Vlan 102 (guest) 192.168.102.1 dhcp 102.100-102.254

To route between them you need a Layer3 Switch that is able to do so by it self or the pfSense must be routing
between the VLANs and the LAN, but then all the VLANs must be ending at the WLAN AP and starting at the
pfSense and also the Switch must supporting VLANs too.

Is the Switch capable to handle and support VLANs?
Is the WLAN AP able to handle VLANs?
Is the WLAN AP capable of multi-SSIDs?
Are the VLANs "tagged" because of the multi-SSID?
Is pfSense routing between the VLANs or does it the Switch itself?

Ojisang

@johnpoz:

"I could not ping on same VLAN."

If your on the same vlan and you can not ping it… WTF does that have to do with pfsense...

Sorry I was just answering @SnailKhan I am not sure why I could not ping IP Addresses in the same VLAN even though connection is okay.

Ojisang

Thank you for your reply @BlueKobold. I am a complete noob when it comes to pfSense and am studying it. As for the questions:

Is the client isolation (in pfSense) for WLAN clients are activated?

I am not sure.

This is mostly a good idea or should all your guests go around and expedite your entire LAN with
all of its devices?

Thank you. I will not change this setting.

For what? Change perhaps better the rules for the VLANs and that it!

Yes I will add rules. Thank you for your advice.

I don´t really know what you want to tell us with this words, but please
accept that you should perhaps draw a small network schematic for us that we will being
able to understand your entire network topology.

I will try to make the schematic when I have time. Actually I setup the AP settings (like disabling the DHCP, adding it's own LAN IP Address) before putting it in the pfSense.

Original firmware or DD-WRT or OpenWRT or Tomato based firmware?

It was just original firmware, no tomato or any type of vegetables used. joke hehe

Is this cheap WiFi AP supporting VLANs?

I'm not even sure it does. Sorry!!! :-\

Is pfSense routing between the VLANs or does it the Switch itself?

I'm pretty sure pfSense is doing this one.

Thanks again.

johnpoz

"I plugged in wifi APs directly to designated ports on a switch and Vlans are working correctly."

So your switch supports vlans? What switch is it? And again your pc talking to your AP web gui when they are in the same vlan on your switch has NOTHING to do with pfsense.. Since that traffic would never go to pfsense.