Opt interface cannot access internet
-
Johnpoz,
With only one access point hooked up directly to the WiFi interface, and a rule set on that interface to pass any traffic except to the LAN subnet, the server still stopped the DHCP service. I attached a screenshot of the error. Also, in the system log, in the DHCP tab there were several requests logged, such as this one:
Oct 10 18:31:51 dhcpd: DHCPINFORM from 10.0.0.51 via em0: unknown subnet for client address 10.0.0.51
em0 is the Opt interface. The client, in this case 10.0.0.51, is wired directly to the LAN. I connected a laptop to the access point connected to the opt interface and it assigned the correct IP (in the 10.0.1.0 subnet).
Any ideas?
-
" OPT3 interface has no IP assigned and is just connected to one of the ports on the back of the DHCP server in the 10.0.0.0/24 Subnet."
What – so how many interfaces do you have connected to pfsense from 1 server? And this is bridged with your lan interface??
Dude it really sounds like you one messed up configuration.. It should not be possible for em0 to be seeing packets from a device on the 10.0.0 network if its on the 10.0.1 network.. So either your running different address space over the same wires or you have something bridged that should not be.
I have concerns if you have multiple interfaces in this dchp server connected to multiple ports on pfsense and then you have opt3 bridged to lan??
As to your dhcp error?? Does your dhcp server have address 10.0.1.0 ?? That is not a valid IP if using a /24 mask.. Now if you were using say 10.0.0.0/23 as your network than 10.0.1.0 is a valid address.
You stated your addresses are
10.0.0.0/24 as LAN
10.0.1.0/24 as OPT-WiFiIf that is the case than 10.0.1.0 is not a valid IP to be used by a host.
If you don't mind I would be happy to team viewer in and take a look.. You got something wrong!!
-
I double checked the bridge interfaces and as soon as I enabled OPT1 interface it was automatically assigning it to the bridge between LAN/OPT3. I took that OPT1 interface off and so far DHCP on the server is good. I don't know why it would automatically assign it as bridged, unless I did that a long time ago playing around with pfSense.
There are only 2 interfaces connected to pfSense from the server. LAN (from the switch), and OPT3. The OPT3 interface is for VMWare. It has the IP for management traffic and has rules to only allow LAN traffic.
I really think this whole problem had to do with that bridge I didn't see. The DHCP server is in the 10.0.0.0/24 subnet, the opt-wifi is 10.0.1.0/24.
I'd love for you to take a look. Is tomorrow ok? What timezone are you in?
-
Again you have this dhcp server with 2 connections? You most likely have rouge detection on with the MS dhcp server.. And it can yes shut stuff down.
Why does your server have multiple connection on different networks?
http://technet.microsoft.com/en-us/library/cc958931.aspx
Preventing Rogue DHCP ServersI am in Central, Chicagoland – Sunday is Football, so prob not have any time.. Monday should work.. Most likely anytime 9-5 works, send me a PM and we can take a closer look.