Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Wifi and LAN on same subnet (SOLVED)

    Scheduled Pinned Locked Moved Wireless
    45 Posts 4 Posters 25.8k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • R
      Rickinfl
      last edited by

      Wow… Someone really needs to document how to do this!  Need Documentation on Normal setup of WiFi and then WiFi on the Same Subnet.

      I've been researching this for almost 2 weeks now and I'm really tied of trying to get this to work.

      I have read every post I could find on this. I've watched every Youtube Video and Even the one on Pfsense Site...  The problem is NOT 2 of any of the documentation is the same. Seems everyone does it different, but none of it works.

      Really wish someone could post how to do this that's done it already.  :(

      1 Reply Last reply Reply Quote 0
      • DerelictD
        Derelict LAYER 8 Netgate
        last edited by

        It's just not that difficult.  Bridging works fine.

        The instructions you have already posted cover everything you need to do.

        If it doesn't work you need to be able to troubleshoot it to find out what was done incorrectly or where the problem otherwise lies.

        Chattanooga, Tennessee, USA
        A comprehensive network diagram is worth 10,000 words and 15 conference calls.
        DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
        Do Not Chat For Help! NO_WAN_EGRESS(TM)

        1 Reply Last reply Reply Quote 0
        • R
          Rickinfl
          last edited by

          Well I got as far as being able to ping anything on the network from wireless or static. The WiFi just can't get out.  WiFi gets an IP address from DCHP.

          1 Reply Last reply Reply Quote 0
          • DerelictD
            Derelict LAYER 8 Netgate
            last edited by

            What are the firewall rules on wifi?  You need rules on all bridge members and the bridge itself.

            Chattanooga, Tennessee, USA
            A comprehensive network diagram is worth 10,000 words and 15 conference calls.
            DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
            Do Not Chat For Help! NO_WAN_EGRESS(TM)

            1 Reply Last reply Reply Quote 0
            • R
              Rickinfl
              last edited by

              LAN Net > Any
              WiFi Net > Any
              Bridge Net > Any

              1 Reply Last reply Reply Quote 0
              • R
                Rickinfl
                last edited by

                Here is all the steps I exactly took:

                Fresh Build Pfsense. Got it configured and connected my computer to it and have internet access and access to my LAN.

                1. Shut down install WiFi card (Card is on the recommended list of cards that work with Pfsense)
                2. Interfaces > Added WiFi card (Opt1) renamed it to WiFi. > Setup WiFi settings.
                3. Interfaces > Assign > Bridges > Created a Bridge > Renamed it to Bridge > Selected LAN and WiFi
                4. Interfaces > Added new Interface > Opt2 > Renamed to Bridge > Network Port = Bridge
                5. DHCP Server > Turned on DHCP for Bridge > Enabled > Set Range. (No DHCP on LAN or WiFi)
                6. Firewall > Rules > Added New Rule > Source = Bridge Net > Rest set to Any.
                7. System > Advanced > System Tuneables > net.link.bridge.pfil_member > Changed from 1 to 0
                8. Interfaces > LAN > IPv4 Configuration Type = None  > IPv6 Configuration Type = None
                9. Interfaces > WiFi > IPv4 Configuration Type = None  > IPv6 Configuration Type = None

                My Configuration:

                Old:

                WAN > DHCP
                LAN > 10.10.0.1

                New:

                WAN > DHCP
                LAN >
                WiFi >
                Bridge > 10.10.0.2 > DHCP

                I can connect my Phone and Laptop to WiFi. I can ping both from either one. No Internet Access.

                Now you know what steps I took to get here. I know them well I've rebuilt it about 20+ Times from scratch trying to get this to work.

                Thanks,
                Rick

                1 Reply Last reply Reply Quote 0
                • DerelictD
                  Derelict LAYER 8 Netgate
                  last edited by

                  @Rickinfl:

                  LAN Net > Any
                  WiFi Net > Any
                  Bridge Net > Any

                  What interfaces are those on?  There should be no more LAN net or WIFI Net - only Bridge Net.

                  Chattanooga, Tennessee, USA
                  A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                  DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                  Do Not Chat For Help! NO_WAN_EGRESS(TM)

                  1 Reply Last reply Reply Quote 0
                  • R
                    Rickinfl
                    last edited by

                    Here are the Firewall Rules

                    Wan.png
                    Wan.png_thumb
                    LAN.png
                    LAN.png_thumb
                    Wifi.png
                    Wifi.png_thumb
                    Bridge.png
                    Bridge.png_thumb

                    1 Reply Last reply Reply Quote 0
                    • DerelictD
                      Derelict LAYER 8 Netgate
                      last edited by

                      First, change your bridge rules to any.  You have them set for TCP only.  DNS and many other things won't work like that.

                      Second, make rules on LAN and WIFI that look EXACTLY like the rules on bridge.  (Not with source LAN net or WIFI net, but for BRIDGE net - yes, on LAN and WIFI, source BRIDGE net)

                      Chattanooga, Tennessee, USA
                      A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                      DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                      Do Not Chat For Help! NO_WAN_EGRESS(TM)

                      1 Reply Last reply Reply Quote 0
                      • R
                        Rickinfl
                        last edited by

                        Still not working.

                        Wan.png
                        Wan.png_thumb
                        LAN.png
                        LAN.png_thumb
                        Wifi.png
                        Wifi.png_thumb
                        Bridge.png
                        Bridge.png_thumb

                        1 Reply Last reply Reply Quote 0
                        • DerelictD
                          Derelict LAYER 8 Netgate
                          last edited by

                          All your rules are still TCP only, bro.

                          Change them all to this:

                          ![Screen Shot 2014-11-18 at 8.56.33 AM.png](/public/imported_attachments/1/Screen Shot 2014-11-18 at 8.56.33 AM.png)
                          ![Screen Shot 2014-11-18 at 8.56.33 AM.png_thumb](/public/imported_attachments/1/Screen Shot 2014-11-18 at 8.56.33 AM.png_thumb)

                          Chattanooga, Tennessee, USA
                          A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                          DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                          Do Not Chat For Help! NO_WAN_EGRESS(TM)

                          1 Reply Last reply Reply Quote 0
                          • R
                            Rickinfl
                            last edited by

                            Did that still not working.

                            Wan.png
                            Wan.png_thumb
                            LAN.png
                            LAN.png_thumb
                            Wifi.png
                            Wifi.png_thumb
                            Bridge.png
                            Bridge.png_thumb

                            1 Reply Last reply Reply Quote 0
                            • DerelictD
                              Derelict LAYER 8 Netgate
                              last edited by

                              What's not working?

                              Do you get DHCP on the WIFI port?  On the LAN port?
                              Can you ping the BRIDGE address from the WIFI port?  From the LAN port?
                              Can you ping the next hop gateway from the WIFI port?  From the LAN port?
                              Can the Hosts on LAN ping the hosts on WIFI?  Vice versa?
                              What DNS is being handed out to the DHCP clients?  Is that the DNS server actually in use by the clients? Can you resolve names using that address?
                              Etc.

                              Chattanooga, Tennessee, USA
                              A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                              DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                              Do Not Chat For Help! NO_WAN_EGRESS(TM)

                              1 Reply Last reply Reply Quote 0
                              • R
                                Rickinfl
                                last edited by

                                Wait… From my phone I'm connected to Pfsense. I opened Chrome browser and can't get to any website, BUT I just accidentally went to my cloud and it loaded. At this point and some testing... I can access any https site, just not http sites.

                                1 Reply Last reply Reply Quote 0
                                • DerelictD
                                  Derelict LAYER 8 Netgate
                                  last edited by

                                  Let me guess.  You're also trying to run squid or snort or both.

                                  Chattanooga, Tennessee, USA
                                  A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                                  DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                                  Do Not Chat For Help! NO_WAN_EGRESS(TM)

                                  1 Reply Last reply Reply Quote 0
                                  • R
                                    Rickinfl
                                    last edited by

                                    No actually it's a fresh install and no packages installed.

                                    Can't seem to figure out what it is. So Close!  smh

                                    1 Reply Last reply Reply Quote 0
                                    • DerelictD
                                      Derelict LAYER 8 Netgate
                                      last edited by

                                      That doesn't make any sense. pf or otherwise.  Firewall logs logging anything?

                                      Chattanooga, Tennessee, USA
                                      A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                                      DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                                      Do Not Chat For Help! NO_WAN_EGRESS(TM)

                                      1 Reply Last reply Reply Quote 0
                                      • R
                                        Rickinfl
                                        last edited by

                                        I don't see anything,

                                        But the question I have is how long has WiFi worked just was blocking non secure websites?  I'll backup the config then rebuild it again from scratch and find out.

                                        I really appropriate all the help you've given me. Thank You for all your Help!

                                        Rick

                                        1 Reply Last reply Reply Quote 0
                                        • DerelictD
                                          Derelict LAYER 8 Netgate
                                          last edited by

                                          Proxy configured in the web browser?  Weird.

                                          Chattanooga, Tennessee, USA
                                          A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                                          DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                                          Do Not Chat For Help! NO_WAN_EGRESS(TM)

                                          1 Reply Last reply Reply Quote 0
                                          • R
                                            Rickinfl
                                            last edited by

                                            Totally rebuilt it. Setup just like I did before. WiFi works on https only.  So this whole time it basically worked. Just not for non secure!

                                            I'm going over everything since now I have fresh log files.

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.