Host OverRide for UnFi APs
-
@stephenw10 said in Host OverRide for UnFi APs:
able to connect to the AP anywhere.
Concur - if there is a any any rule from where his ssh client is, then doesn't matter what rules are on the AP interface.. Unless he has some outbound rule in floating. But since his AP should be getting an IP from dhcp, its not really possible to have it use anything other than dhcp until its adopted..
So unless he also dicked with the default dhcpd setting, the AP would be pointing back to pfsense as it gateway.
But since this forest is so overgrown with weed trees, its hard to pick out the specific oak your looking for.
-
Guys,
Thank you for your patience. I cleaned my Floating Rules and Reset the state table.
Everything now is working. FireHol was giving a lot of false positive. So I removed them all
-
@magikmark said in Host OverRide for UnFi APs:
FireHol was giving a lot of false positive
Its not false if the IP range is included... A simple look to that firehol level 1, and it includes all the bogons, which would include rfc1918.
So yeah with those rules you wouldn't be talking between your rfc1918 vlans ;)
-
Just found out you need to disable your vpn when configuring APs. You will get disconnected status if you don't at least for Layer 3 adoptions.
-
A VPN in pfSense? If you are policy routing traffic across it then, yeah, it could well prevent local connections. You should probably have rules to allow it above policy routing though if that is the case.
Steve
-
VPN is not in pfsense. Its in my desktop where the controller is also installed
-
Ah, well similar deal if the VPN client is routing all your traffic over the VPN.
