Another - No Internet from LAN side
-
Hello, new person here. I installed pfsense in a VM with complete success and decided to have a go at it as my main firewall instead of a cheapo router.
I installed pfsense with only 2 nics. My setup is like so:
ISP –> modem -- > Wan_Interface_(pfsense)_Lan_Interface <--- switch <---- Computers.
My Wan side is setup with obtaining an IP from my ISP with DHCP. This works. I have a valid WAN IP address, and not a private IP.
My Lan is set up with an IP of 192.168.1.1 and has DHCP enabled to issue IP's to my networks computers....this also works just fine. I get an IP and I am able to log into the pfsense web interface.
I have no internet though from LAN to WAN. When going to Diagnostics and using Ping, I can ping google just fine when selecting WAN interface, but when selecting LAN interface I get no response.
I dont know what to do at this point, this stuff usually just works for me. Now thats its not, I dont really know how to trouble shoot connectivity. Both LAN and WAN sides seem to be working fine, I just cant get traffic through from LAN to WAN. Pinging computers on the LAN from the pfsense box also works.
I have created no firewall rules, this is a out of the box install of pfsense 2.1.
Anyone out there know what might be the cause?
Attached it my Interface Statuses.
-
I can ping google just fine when selecting WAN interface, but when selecting LAN interface I get no response.
That's not surprising, the pfSense box has no route to google.com via the LAN interface.
Ok so when you attempt to ping google.com from a computer on the LAN what is the output exactly?
The ping error is far more telling than 'doesn't work'.Did you set a gateway on the LAN interface by chance? This seems to trip up a lot of people.
Steve
-
is the DHCP IP your modem is giving pfsense an internal IP ?
like 10.0.0.2 or something? Or is it a true external IP?
if it is, you need to uncheck the top box on the WAN interface
-
I have a valid WAN IP address, and not a private IP.
Seems like the WAN is setup correctly.
Even so you should still get general internet access from clients behind pfSense even with those rules still in place. They only block incoming traffic.Steve
-
Ok, I dont know what is going on. Its working fine now. I changed nothing at all. I released and renewed a ton of times the WAN interface, unplugged and plugged back in the modem power. It seems to be having a hard time obtaining an IP address from my ISP. When it finally came back up with an IP address, the number had changed from a 71.x.x.x value to a 97.x.x.x value and now all is working fine.
Wish I had more info, just glad its working.
