Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Help! Wireless AP setup - local network connection ok but no internet connection

    Scheduled Pinned Locked Moved Wireless
    13 Posts 5 Posters 2.0k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • B
      bucks
      last edited by

      Hello All,

      First off, I'm a PFSense newbie but with some general IT background.  I've spent a few days on forums and goolge but nothing seems to work properly.

      I have an old hp desktop that I'm using for pfsense.  Just bought a wireless desktop card (Apple Airport Atheros AR5BXB112 AR9380) and tried to setup an wireless AP on pfsense.

      I've added/enabled the new wifi interface, changed the general configuration and enabled the dhcp server for the 'wifi interface'. I can connect to the new wifi network but no internet connection.  If I setup a bridge (lan-wifi) it works just fine but I do not want to bridge.

      I think I'm missing something simple but can't think of it.  Any ideas?

      Here's a few screenshots with my current setup/configurations.  Please don't laugh at my setup, I have it this way for various reasons.

      Thank you in advance.

      ![Untitled Diagram.jpg](/public/imported_attachments/1/Untitled Diagram.jpg)
      ![Untitled Diagram.jpg_thumb](/public/imported_attachments/1/Untitled Diagram.jpg_thumb)
      01.jpg
      01.jpg_thumb
      02.jpg
      02.jpg_thumb
      03.jpg
      03.jpg_thumb
      04.jpg
      04.jpg_thumb
      05.jpg
      05.jpg_thumb
      06.jpg
      06.jpg_thumb

      1 Reply Last reply Reply Quote 0
      • pttP
        ptt Rebel Alliance
        last edited by

        Add the NAT rule for your "WIFI" net… Or change the NAT to "Auto"

        1 Reply Last reply Reply Quote 0
        • S
          Soyokaze
          last edited by

          1st: kudos for providing all necessary info (including network diagram! wow!).
          2nd: @ptt says it right - you don't have NAT rule for packets from your wifi network (10.20.2.0/24) through WAN interface.

          Need full pfSense in a cloud? PM for details!

          1 Reply Last reply Reply Quote 0
          • B
            bucks
            last edited by

            Thank you for your kind responses.  I have to set my NAT to 'Manual' for my vpn (assuming your referring to the Firewall–>NAT-->Outbound-->Outbound NAT Mode).

            If I understand correctly, I've added a rule to the WAN interface (see image). After that, I still have no internet connection.  I've even added the same rule (see same image) to the LAN and WIFI interface (Firewall-->Rules) as well.

            None of the IP in the WIFI range even shows up in Status-->System Logs-->Firewall.

            I'm apologize, but can you explain how to do that?  Networking is my kryptonite, but I've been learning as much as I can.

            Kind Regards

            6.jpg
            6.jpg_thumb

            1 Reply Last reply Reply Quote 0
            • johnpozJ
              johnpoz LAYER 8 Global Moderator
              last edited by

              "I have to set my NAT to 'Manual' for my vpn (assuming your referring to the Firewall–>NAT-->Outbound-->Outbound NAT Mode)."

              No not really.. Hybrid would of worked that allows you to create your own special outbound nats for like vpn but auto create for your local interfaces to the internet, etc.

              An intelligent man is sometimes forced to be drunk to spend time with his fools
              If you get confused: Listen to the Music Play
              Please don't Chat/PM me for help, unless mod related
              SG-4860 24.11 | Lab VMs 2.8, 24.11

              1 Reply Last reply Reply Quote 0
              • B
                bucks
                last edited by

                Thanks johnpoz for clarifying that I just followed the setup instructions on the vpn site.

                Unfortunately, I still have the same issue when I selected hybrid (and restarted pc just to be safe).  I can connect to the wifi interface but no internet still.

                Now it's on Hybrid mode, do I still need to configure rules to allow packets?

                I appreciate your help.

                Kind Regards

                7.JPG
                7.JPG_thumb

                1 Reply Last reply Reply Quote 0
                • DerelictD
                  Derelict LAYER 8 Netgate
                  last edited by

                  Duplicate the LAN pass any any rule on the WIFI interface. Change the interface and the source network to WIFI, of course.

                  Chattanooga, Tennessee, USA
                  A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                  DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                  Do Not Chat For Help! NO_WAN_EGRESS(TM)

                  1 Reply Last reply Reply Quote 0
                  • B
                    bucks
                    last edited by

                    Thanks Derelict for the info.

                    That was one of the first thing I tried - I even restarted the firewall for safe measures.

                    Anything else I can try?

                    9.JPG
                    9.JPG_thumb
                    10.JPG
                    10.JPG_thumb

                    1 Reply Last reply Reply Quote 0
                    • S
                      Soyokaze
                      last edited by

                      Add rule on wifi interface to allow trafic from wifi network to any?

                      Need full pfSense in a cloud? PM for details!

                      1 Reply Last reply Reply Quote 0
                      • B
                        bucks
                        last edited by

                        I believe that's the rule I had in there already, correct me if I'm wrong.

                        What worked for me is setting the gateway to 'WAN_DHCP' instead of leaving it as default.  This is what I wanted to achieve.

                        Thanks everyone for your input.

                        Kind Regards

                        B

                        9.JPG
                        9.JPG_thumb
                        13.JPG
                        13.JPG_thumb

                        1 Reply Last reply Reply Quote 0
                        • DerelictD
                          Derelict LAYER 8 Netgate
                          last edited by

                          That would only be necessary if that gateway is not your default gateway.

                          Chattanooga, Tennessee, USA
                          A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                          DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                          Do Not Chat For Help! NO_WAN_EGRESS(TM)

                          1 Reply Last reply Reply Quote 0
                          • B
                            bucks
                            last edited by

                            Weird, the wan is my default gateway.

                            14.JPG
                            14.JPG_thumb

                            1 Reply Last reply Reply Quote 0
                            • DerelictD
                              Derelict LAYER 8 Netgate
                              last edited by

                              Perhaps one of those VPN services is pushing a set of default routes.

                              If you don't want to route all traffic all the time out a VPN client it is probably best to check don't pull routes there and policy route just what you want out of it. Else you have to understand that the VPN is your default gateway.

                              Chattanooga, Tennessee, USA
                              A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                              DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                              Do Not Chat For Help! NO_WAN_EGRESS(TM)

                              1 Reply Last reply Reply Quote 0
                              • First post
                                Last post
                              Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.