Navigation

    Netgate Discussion Forum
    • Register
    • Login
    • Search
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search

    Webgui locked to hardware address?

    webGUI
    3
    8
    1108
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • R
      Randallflagg last edited by

      I installed a 4 port card on my pfSense box, reassigned interfaces and now I can no longer login to the webgui.  It works fine with no issues but need to login to make some changes and now I can't.  I rebooted it last night figuring it just needed it, but today still can't get in.  I haven't had the time to swap back to the old interfaces but is there a reason I am not getting a response?

      1 Reply Last reply Reply Quote 0
      • Gertjan
        Gertjan last edited by

        Wild guess : the 'LAN' you were using wasn't LAN, but OPT1, 2 or 3.
        Only the LAN port has the default 'anti-lockout' rule. All the OPTx interface have no rules, so nothing gets in …

        1 Reply Last reply Reply Quote 0
        • johnpoz
          johnpoz LAYER 8 Global Moderator last edited by

          "I rebooted it last night figuring it just needed it"

          It isn't running on windows 95 ;) hehehe.. Only time you should have to reboot pfsense is update or patch of itself.  Bios update of the hardware..  Need to change some hardware.. Other than you should not ever have reboot it.

          1 Reply Last reply Reply Quote 0
          • R
            Randallflagg last edited by

            It only had 2 ports prior to adding the card, but I did remove a card and install a new one.  I reassigned only 2 of the 5 total ports.

            I'll double check assignments when I get home but if all my port forwarding rules still work properly I highly doubt that's it.  I'm nor having any connectivity issues, just the webgui.  Console was fine and indicated my last login was in April, but that means it was on this hardware…  Which is now leading me to the card as I type.

            1 Reply Last reply Reply Quote 0
            • johnpoz
              johnpoz LAYER 8 Global Moderator last edited by

              If you can not get to the gui, what is the rules on your lan interface?  As mentioned the antilock out should prevent you from creating a rule that prevents gui access/ssh access on your lan.

              From the console can you validate that gui is running.. You restart it/reset its password and port, etc.

              1 Reply Last reply Reply Quote 0
              • R
                Randallflagg last edited by

                Well I can be sure it wasn't a rule that was created that blocks me out, and the console was active and let me reboot cause it couldn't hurt.  I didn't think to try making changes to the webgui from the console at the time.

                I didn't check the interface assignments yet but last time I used it all was fine until about 3 days ago when I wanted to login to make a rule change now I get no response from http or https on multiple computers/browsers.

                Is ssh enabled by default?  I may try to ssh to it.  The only configuration I have done was swapped from Static WAN to DHCP and setup Dynamic DNS.  I had to change my static routes from my block of 5 addresses to a dynamic wan, but no real change on the LAN side.

                My other thought that I had forgotten about is my switch, it's a Netgear 24 port and I have had 1 issue with it in the past where I'm about 80% sure it had blocked me from gaining access to my storage server IPMI.

                1 Reply Last reply Reply Quote 0
                • R
                  Randallflagg last edited by

                  Verified LAN/WAN ports.  Now I am wondering if I changed the port to not conlict with my webserver, that is probably what i did without writing it down…  :(

                  1 Reply Last reply Reply Quote 0
                  • R
                    Randallflagg last edited by

                    Yep… this can be ignored...

                    I really can't believe I changed the port without writing it down.  I was able to ssh in and vi the config.xml to see what I had done.

                    Shame, Shame, Shame. (sorry just re-watched the series in anticipation)

                    1 Reply Last reply Reply Quote 0
                    • First post
                      Last post

                    Products

                    • Platform Overview
                    • TNSR
                    • pfSense
                    • Appliances

                    Services

                    • Training
                    • Professional Services

                    Support

                    • Subscription Plans
                    • Contact Support
                    • Product Lifecycle
                    • Documentation

                    News

                    • Media Coverage
                    • Press
                    • Events

                    Resources

                    • Blog
                    • FAQ
                    • Find a Partner
                    • Resource Library
                    • Security Information

                    Company

                    • About Us
                    • Careers
                    • Partners
                    • Contact Us
                    • Legal
                    Our Mission

                    We provide leading-edge network security at a fair price - regardless of organizational size or network sophistication. We believe that an open-source security model offers disruptive pricing along with the agility required to quickly address emerging threats.

                    Subscribe to our Newsletter

                    Product information, software announcements, and special offers. See our newsletter archive to sign up for future newsletters and to read past announcements.

                    © 2021 Rubicon Communications, LLC | Privacy Policy