NO INTERNET TRAFFIC ON LAN
-
I have installed pfsense on old machine having two Network interfaces. There is one router huwei which is giving the internet having 192.168.5.10 . One interface of old machine I have uses as WAN and set IP to 192.168.10.27 static. I have made another interface used as LAN and give IP as 192.168.55.1. I am able to access LAN GUI 192.168.55.1 from laptop. but the other sites not working.
Please help me to make internet working -
@pamela Why do you have a gateway on your lan.. Yeah that is not going to work! And you just point it to itself? Why did you do that - pfsense all over the place warns you that this is LAN do not set a gateway..
-
Hi, try these steps:
1st: Fix your firewall rules, you are only allowing ICMP.
Create in LAN a rule allowing LAN_NET to ANY ports TCP 80/443 and TCP/UDP 53.2nd: You don't need a gateway in the LAN, you can remove that.
3rd: I would also disable the outbound NAT for the LAN network and create a static route in that huawei router like this:
Route to 192.168.55.0 next hop 192.168.10.27.
Edit: It would be better to put pfsense facing WAN directly, without that router... Public IP directly in Pfsense WAN.. -
@johnpoz I have removed that still problem persisits
-
@mcury Problem remains the same. I have removed the gateway from LAN and also edit the rules as follows
And also on the router side i have created a static route in huawei router as mentioned
When i ping the traffic routed as mentioned in following screen shots
It is replying but not opening the website.
-
@pamela that setup makes no sense.. I highly doubt your Huawei is going to nat your downstream 192.168.55 network.
There is no need to add that route on that router, and you should let pfsense nat to its wan IP.
-
@johnpoz said in NO INTERNET TRAFFIC ON LAN:
@pamela that setup makes no sense.. I highly doubt your Huawei is going to nat your downstream 192.168.55 network.
There is no need to add that route on that router, and you should let pfsense nat to its wan IP.
She is behind a double nat, which is not desirable.
If she disables the NAT in pfsense, she will reach the Huawei router with a source IP of the 192.168.55.0/24 network.
The Huawei router won't know how to route back the packet, and it will send it through the default route, which is WAN.
That is why I told her to create a static route, so the Huawei router knows that the 192.168.55.0 is behind the LAN interface.dead on arrival, nowhere to be found.
-
@pamela br0 is the WAN interface? Try changing that to the LAN interface of the Huawei router.
-
@mcury said in NO INTERNET TRAFFIC ON LAN:
which is not desirable.
But works.. triple nat, quadruple nat also works, etc.. I find it highly unlikely that router she has at the edge will do natting of downstream networks..
I would highly suggest just getting it to work with the double nat, before attempting anything else.. Pfsense should just like any other client connected to that router.. If after that works they want to play with removing the double nat.. Great but out of the box just plugging in pfsense should work, as long as the pfsense lan and wan are not overlapping networks.
-
@johnpoz said in NO INTERNET TRAFFIC ON LAN:
I find it highly unlikely that router she has at the edge will do natting of downstream networks..
Hm, I didn't take that in consideration.. Its most likely won't have that option..
You are right, better to keep the double nat, then in case she needs in the future, work to remove it..So Pamela, sorry for giving you that 3rd step instruction, better to remove the static route from Huawei router, and leave the NAT enabled at the pfsense side.. Should work..
-
Yes there appears to be no default gateway set.
As others have suggested, remove the LAN gateway.
Set the default v4 gateway to WAN instead of automatic.Steve
-
@stephenw10 Thanks a lot for having a deep understanding of my case. I changed the gateway to WAN now it is working fine.
-
@pamela said in NO INTERNET TRAFFIC ON LAN:
@stephenw10 Thanks a lot for having a deep understanding of my case. I changed the gateway to WAN now it is working fine.
Internet started working but is very slow not able to get actual speed I have made following changes still the speed remains same
-
@pamela said in NO INTERNET TRAFFIC ON LAN:
Internet started working but is very slow not able to get actual speed I have made following changes still the speed remains same
172.217.160.227 and 142.250.207.238 IS GOOGLE LLC
Could you create a firewall rule on wan (to allow traffic please)
-
@silence said in NO INTERNET TRAFFIC ON LAN:
Could you create a firewall rule on wan (to allow traffic please)
What???
-
@silence said in NO INTERNET TRAFFIC ON LAN:
create a firewall rule on wan (to allow traffic please)
Um, yeah, don't do that!
You don't need rules on WAN to allow traffic to reach Google.
What speed are you seeing? What do you expect to see? How are you measuring?
Steve
