Web gui stop working

[shp1367]

Hello
I install a 2.7.2-RELEASE (amd64) version of pfsense newly on a vmware esxi 6.5.
After installation I add a public IP for WAN on vmx0 and a dhcp ipv4 for LAN on vmx1.
Console show the both IP,
but when I open public IP on web , it not load on https mode,
So I have to go on console and on shell menu (8) I will type "pfctl -d" and web gui open after it!

Then every time I do a change on web config and save or apply them,again I lost web GUI until I type same command.

[Gertjan]

@shp1367 said in Web gui stop working:

but when I open public IP on web , it not load on https mode,
So I have to go on console and on shell menu (8) I will type "pfctl -d" and web gui open after it!

Accessing the GUI from WAN doesn't work. And shouldn't work.
Access the GUI from your virtual LAN.

Btw : "pfctl -d" is humor.
You just installed a firewall.
"pfctl -d" will disable the firewall .... that's a bit counter productive.

You can also add a firewall rule on the WAN interface that let you access the GUI from WAN.

[shp1367]

Hello dear Gertjan

@Gertjan said in Web gui stop working:

Access the GUI from your virtual LAN.
How can I use LAN network on public net? I mean my firewall is on the net,

how I can access without public IP address?

You can also add a firewall rule on the WAN interface that let you access the GUI from WAN.

I add a such rules to access from any source IP and port to wan address and put it under two default pfsense "Block private networks" rules but it seems not work

[Gertjan]

@shp1367 said in Web gui stop working:

how I can access without public IP address?

The default pfSense LAN IP is 192.168.1.1/24 - that's not a public IP, it's RFC1918 also called ""Block private networks".
On the LAN, the DHCP server is activated.
So, "attach" a device to your LAN, and it will obtain a DHCP lease (IP, network, DNS and gateway) and you can access the pfSense just fine.

how I can access without public IP address?
and
under two default pfsense "Block private networks"

Using a private IP (see above), connected to WAN and try to access the GUI from WAN (nobody on planet earth does that !!) won't work.
Because you activated "Block private networks" on your WAN ( ! ).

Again : you have a LAN, use it. It's meant to be sued like that.
Exposing the GUI on WAN is considered 'bad'.

[shp1367]

@Gertjan said in Web gui stop working:

The default pfSense LAN IP is 192.168.1.1/24 - that's not a public IP, it's RFC1918 also called ""Block private networks".
On the LAN, the DHCP server is activated.
So, "attach" a device to your LAN, and it will obtain a DHCP lease (IP, network, DNS and gateway) and you can access the pfSense just fine.

Yes I know this way,
You say I use pfsense from a device that is in private network range , OK

So If I use web gui from lan and from a private network so it mean I close wan GUI access, can I use my wan ip fro NAT and other firewall rules like VPN too?