Access webui need to open 443?

[nadvig23]

I’m a new pfsense user.

Here is my config:
Internet dhcp ip : rl0
Lan : em0 192.168.1.1 connect to my switch
Wifi : opt1 192.168.2.1 connect to netgear

I have assisgned interfaces and ip trought the consol
Restart webui and php…

From a pc Lan connected to my switch i assume that i must be able to connect to 192.168.1.1 webui???

I cannot!

Do i need to open port 443 from the consol shell?

Thanks!

[viragomann]

@nadvig23
No, the WebGUI is by default accessible from the LAN.

Did you even enable HTTPS?

If you go through the LAN network configuration in the console, pfSense shows an URL. Copy and paste it into the browsers address line.

[nadvig23]

@viragomann

[nadvig23]

It gave me only the ip/24 of my interfaces
I have no url there

I’m in the consol

[SteveITS]

@nadvig23 try
https://docs.netgate.com/pfsense/en/latest/troubleshooting/connect-to-gui.html

And a few of these:
https://docs.netgate.com/pfsense/en/latest/troubleshooting/locked-out.html

[nadvig23]

@SteveITS

Ok now i have the url showed on the console
Http://192.168.1.200

Didn’t ask me to activate https

Now on my laptop on the Lan i have configured for now ip dhcp with 192.168.1.1 as gateway

Go to http://192.168.1.200 nothing!!!

I have check the cable and the switch everything is ok

[SteveITS]

@nadvig23 if the pfSense LAN IP is .200 then why is .1 the gateway ? Do you have a second device providing DHCP?

[nadvig23]

@SteveITS

No. I will put again lan 192.168.1.1 and gateway same ip.

Will try again

[nadvig23]

@nadvig23

It’s working!!! I can access webui from a pc on the Lan!!! I think it was because i didn’t put the 192.168.1.1 as dns on the laptop while trying to access the webui

But since lastnight i got network unreacheable the wan is dhcp detected the ip from my Isp but i can’t ping 8.8.8.8 From the console . Before the ping 8.8.8.8 was working. I check the cable and my isp everything is ok

[viragomann]

@nadvig23
Try to ping from pfSense WebGUI itself. Diagnostic > Ping
Is this successful?

[nadvig23]

@viragomann

Webui - diagnostics- ping:

Yes !
Host 8.8.8.8
Source wan

No!
Host 8.8.8.8
Source Lan

[viragomann]

@nadvig23
So presumably your outbound NAT is not working. Firewall > NAT > Outbound
Is it in automatic mode?
Did you change something or disabling NAT in the System > Advanced settings.

Is your WAN set properly? Status > Interfaces

[nadvig23]

@viragomann

Outbound - automatic
I have not yet change something -
In status interfaces
Wan / rl0

• status up dhcp

Lan / re0 : up 192.168.1.1

[nadvig23]

@nadvig23

I have change my switch (it was a manageable switch …. Weird cannot change the ip gateway for the new one 192.168.1.1) so with the new netgear switch (not manageable this one) now;

Webui Diagnostics Ping:
Host 8.8.8.8
Source wan or lan is 0% lost
So for now this is working

But the lan pc cannot acces Internet i don’t go out!

Maybe it’s because i have to add firewall rules?

[SteveITS]

@nadvig23 LAN has an allow to any rule out of the box. If that was removed then yes a rule is needed for DNS and Internet. All Interfaces have a hidden deny all rule.

[nadvig23]

@SteveITS

I have done no change yet

[nadvig23]

If the rules by default :
Firewall- rules - lan:
Default allow Lan to any rule

Will permit to my laptop from the Lan to go out well i can’t go out to internet
My laptop is 192.168.1.99 with gateway and dns 192.168.1.1
I have put this Mac addr and ip of this laptop in Dhcp server- static mapping….

[SteveITS]

@nadvig23 said in Access webui need to open 443?:

Webui - diagnostics- ping:

Yes !
Host 8.8.8.8
Source wan

No!
Host 8.8.8.8
Source Lan

I was working on a problem router today that I think has a bad WAN port. I reinstalled, and I had this behavior until I finished the setup wizard. I don't recall having to do that in the past.

You might reset to factory defaults and start over just to see.

[nadvig23]

@SteveITS

hello i was in vacation....

i have bought Netgate sg-2100...it is really great! my network is working now!
just a question...can i plug the wifi router (netgear) in the LAN2 port of Netgate??
thanks

[SteveITS]

@nadvig23 you can use any port. On the 2100 the 4 LAN ports are a switch.