Navigation

    Netgate Discussion Forum
    • Register
    • Login
    • Search
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search

    PfSense internet does not work ( Need desperate help!! )

    General pfSense Questions
    9
    43
    3370
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • K
      Koenvuurens last edited by

      Hi,

      I am an pfSense noob, but knows a lot of pc hardware.(also I can get lots of it and high rated)
      I am going to ask LOTS of questions, but I will get more experienced over time.
      My pfSense router/firewall specs:

      Processor: Intel Xeon x3440
      Motherboard: Asus p7e-x/mr
      Ram: 4x 2gb 1333mhz kingston ram (8gb)
      Ethernet:
      2x onboard intel 1000(gb) links
      2x Tp-Link TG-3468 1000(gb) links
      (I am going to add an 10GB link to it later)
      So power is not the problem.

      The real problem:

      If I have the WAN connected to my modem(port 1), and my PC connected to the modem(port 2) I can acces the Website for my config.
      But if I add an LAN interface and connect the LAN to my pc(it's actually an server) I cant acces the Website anymore. I removed the LAN with the console with (1)Assign Interfaces and than I didnt assign it anymore. Than it worked again.
      If you need more information that I can deliver, ask for it.

      Already thanks for reading/helping

      (If my english is bad, dont hate on me! I'm dutch!)

      1 Reply Last reply Reply Quote 0
      • K
        Koenvuurens last edited by

        Hi,

        I was an little bit unclear about the section:

        But if I add an LAN interface and connect the LAN to my pc(it's actually an server) I cant acces the Website anymore.

        I meant:
        I have the link to the modem AND to my pfSense box.

        1 Reply Last reply Reply Quote 0
        • K
          Koenvuurens last edited by

          Why does nobody respond? ….
          All what I ask is what I need to do for getting my pfSense box up and running firewall / router mode...

          1 Reply Last reply Reply Quote 0
          • KOM
            KOM last edited by

            Please provide your settings for WAN and LAN.  For most uses it just works out of the box.  When you configured your LAN, did you give it a gateway?  You don't specify a gateway for LAN connections so remove it if you did.

            1 Reply Last reply Reply Quote 0
            • K
              Koenvuurens last edited by

              Yes, but if I add my lan interface(softwarematicly) I cant acces my webconfigurator anymore

              1 Reply Last reply Reply Quote 0
              • K
                Koenvuurens last edited by

                WAN:
                General:
                IPv4 Configuration Type: Static IPv4 (192.168.2.99)
                IPv6 Configuration Type: DHCP6

                MAC: –-------------------
                MTU: ---------------------
                MSS: ---------------------

                Static IPv4 config:

                IPv4 adress: 192.168.2.99 /24
                IPV4 upstream gateway: GW_WAN - 192.168.2.99

                I cant deliver LAN, because it doesnt work then anymore.

                1 Reply Last reply Reply Quote 0
                • C
                  cmb last edited by

                  That makes it look like you're putting the same IP on LAN as you have on WAN? You can't do that with any router or firewall.

                  1 Reply Last reply Reply Quote 0
                  • KOM
                    KOM last edited by

                    YOu have two things wrong.  As Chris mentioned, you appear to be using the same IP address for your WAN and LAN, which will never work.  You also seem to be specifying a gateway for LAN, which is incorrect.

                    Change your LAN IP address to a different private subnet (try 172.16.0.1) and do NOT specify a gateway.  Only your WAN needs a gateway.

                    1 Reply Last reply Reply Quote 0
                    • K
                      Koenvuurens last edited by

                      No, I use for my WAN 192.168.2.99 and for my LAN 192.168.2.100

                      1 Reply Last reply Reply Quote 0
                      • G
                        grandrivers last edited by

                        no 192.168.x.1-255  change the X

                        pfsense 2.4 super micro A1SRM-2558F
                        C2558 8gig ECC  60gig SSD
                        tripple Wan dual pppoe

                        1 Reply Last reply Reply Quote 0
                        • A
                          antillie last edited by

                          @Koenvuurens:

                          No, I use for my WAN 192.168.2.99 and for my LAN 192.168.2.100

                          Unless you are using stupidly small subnets those IPs are in the same range. You cannot have both interfaces in the same subnet range and expect things to work.

                          1 Reply Last reply Reply Quote 0
                          • KOM
                            KOM last edited by

                            No, I use for my WAN 192.168.2.99 and for my LAN 192.168.2.100

                            You cannot have your WAN and LAN on the same subnet.  Assuming you're using a mask of 255.255.255.0 (also known as /24) then as grandrivers said you need to change your LAN IP to something outside that subnet.

                            1 Reply Last reply Reply Quote 0
                            • K
                              Koenvuurens last edited by

                              @KOM:

                              No, I use for my WAN 192.168.2.99 and for my LAN 192.168.2.100

                              You cannot have your WAN and LAN on the same subnet.  Assuming you're using a mask of 255.255.255.0 (also known as /24) then as grandrivers said you need to change your LAN IP to something outside that subnet.

                              If I am at home I will try that. Thanks already for helping me.

                              1 Reply Last reply Reply Quote 0
                              • K
                                Koenvuurens last edited by

                                Yes, It works! (I can acces the site with the LAN) But!!! If I go to network on my server it says: NETWORK 2: Limited.

                                1 Reply Last reply Reply Quote 0
                                • KOM
                                  KOM last edited by

                                  What do you have for your current LAN settings on pfSense, and what do you have for network settings on your Windows server?

                                  1 Reply Last reply Reply Quote 0
                                  • K
                                    Koenvuurens last edited by

                                    My current LAN settings on my pfSense are:

                                    GENERAL CONFIG

                                    Enable (V) Enable Interface
                                    Desc.          LAN
                                    IPv4 conf. type          Static IPv4
                                    MAC          –-----------------------------
                                    MTU          -------------------------------
                                    MSS          -------------------------------

                                    STATIC IPV4 CONFIG

                                    IPv4 Adress            192.168.1.1 /24
                                    IPv4 upstream gateway  (NONE)

                                    I dont Use IPv6

                                    PRIVATE NETWORKS

                                    ( ) Block Private Networks
                                    (V) Block Bogan Networks

                                    On my win server: I dont use any settings for ethernet.

                                    1 Reply Last reply Reply Quote 0
                                    • K
                                      Koenvuurens last edited by

                                      And KOM, You are an GREAT helper!

                                      1 Reply Last reply Reply Quote 0
                                      • KOM
                                        KOM last edited by

                                        OK, that wasn't quite what I was looking for but no matter.  FYI when we ask for WAN/LAN details, we want to know your IP address, netmask and gateway values.

                                        If I remember, Windows sees you attached to a different network than before.  Your new network is Network1 and the old one is Network2.  It's complaining that your old network is unstable.  You should either delete that network or just ignore its status.  I'm assuming that everything else is working fine?

                                        On my win server: I dont use any settings for ethernet.

                                        What do you mean?  You mean you have it set to the default of Obtain an IP address automatically? If you have DHCP enabled on LAN with pfSense, then your Windows server should have gotten a valid IP address and you wouldn't have had the problems you had at all.

                                        1 Reply Last reply Reply Quote 0
                                        • K
                                          Koenvuurens last edited by

                                          Wait, Wait.
                                          So you just say: Go to ethernet settings and set up: Static ip 192.168.1.1

                                          1 Reply Last reply Reply Quote 0
                                          • KOM
                                            KOM last edited by

                                            Go to ethernet settings and set up: Static ip 192.168.1.1

                                            NO!! That is the IP address of the pfSense LAN interface.  All IP addresses must be unique.  This is basic networking.  If you want to use static IP then set your Windows server IP address to 192.168.1.2.

                                            If you enable DHCP on pfSense LAN then you don't have to specify static IP addresses, but that is up to you.

                                            1 Reply Last reply Reply Quote 0
                                            • K
                                              Koenvuurens last edited by

                                              Welp… Not getting ethernet anymore.
                                              I set up this:

                                              WAN: 192.168.2.99 /24
                                              LAN: 192.168.1.1 /24

                                              I have one and only direct connection with my server to the pfSense box. (the pfSense does have the WAN and the LAN connected)
                                              When I go to my browser and type 192.168.1.1:24 then I get the error: This Webpage Isn't available.
                                              Soo... What do I need to do?

                                              1 Reply Last reply Reply Quote 0
                                              • D
                                                doktornotor Banned last edited by

                                                @Koenvuurens:

                                                When I go to my browser and type 192.168.1.1:24 then I get the error: This Webpage Isn't available.

                                                What? ??? Why are you pointing your browser to port 24? You do NOT type 24 into the browser, that is a netmask!  :o

                                                1 Reply Last reply Reply Quote 0
                                                • K
                                                  Koenvuurens last edited by

                                                  whoops I said it wrong, No I dont type :24

                                                  1 Reply Last reply Reply Quote 0
                                                  • KOM
                                                    KOM last edited by

                                                    OK, we have spent enough time hunting and guessing in the dark.  Please take and post the following screenshots:

                                                    Interfaces - WAN
                                                    Interfaces - LAN
                                                    Firewall - Rules - LAN
                                                    Your Windows Network IP4 Ethernet Properties

                                                    If you are paranoid, scrub any public IP addresses in your shots.

                                                    1 Reply Last reply Reply Quote 0
                                                    • K
                                                      Koenvuurens last edited by

                                                      Yes, but that is not the problem ! I cant acces the WebConfigurator. So I can make screenshots if you want but I cant acces it!!

                                                      1 Reply Last reply Reply Quote 0
                                                      • johnpoz
                                                        johnpoz LAYER 8 Global Moderator last edited by

                                                        Dude can you ping pfsense lan IP from the computer your trying to access the web gui from?

                                                        So can you ping 192.168.1.1 ?

                                                        From you computer is static or dhcp?  Please post ipconfig /all – assuming your on windows?

                                                        An intelligent man is sometimes forced to be drunk to spend time with his fools
                                                        If you get confused: Listen to the Music Play
                                                        Please don't Chat/PM me for help, unless mod related
                                                        2440 2.4.5p1 | 2x 3100 2.4.4p3 | 2x 3100 22.01 | 4860 22.05

                                                        1 Reply Last reply Reply Quote 0
                                                        • K
                                                          Koenvuurens last edited by

                                                          Yes I can ping the pfsense box
                                                          and the settings are in the attachment!


                                                          1 Reply Last reply Reply Quote 0
                                                          • johnpoz
                                                            johnpoz LAYER 8 Global Moderator last edited by

                                                            then you should just be able to go http://192.168.1.1

                                                            Unless your browser is using a proxy that should open, or redirect you to https://192.168.1.1 and the webgui.

                                                            An intelligent man is sometimes forced to be drunk to spend time with his fools
                                                            If you get confused: Listen to the Music Play
                                                            Please don't Chat/PM me for help, unless mod related
                                                            2440 2.4.5p1 | 2x 3100 2.4.4p3 | 2x 3100 22.01 | 4860 22.05

                                                            1 Reply Last reply Reply Quote 0
                                                            • K
                                                              Koenvuurens last edited by

                                                              Okey, got it working again.
                                                              but still no ethernet through my pfSense
                                                              Attachments are:

                                                              Interfaces - WAN
                                                              Interfaces - LAN
                                                              Firewall - Rules - LAN
                                                              Windows Network IP4 Ethernet Properties








                                                              1 Reply Last reply Reply Quote 0
                                                              • johnpoz
                                                                johnpoz LAYER 8 Global Moderator last edited by

                                                                Well sure looks like ethernet is working to me if your connected to the gui..

                                                                So you set static on your PC.. If you meant no internet on your pc, yeah you didn't set any dns.. So how would you expect your pc to lookup anything?

                                                                An intelligent man is sometimes forced to be drunk to spend time with his fools
                                                                If you get confused: Listen to the Music Play
                                                                Please don't Chat/PM me for help, unless mod related
                                                                2440 2.4.5p1 | 2x 3100 2.4.4p3 | 2x 3100 22.01 | 4860 22.05

                                                                1 Reply Last reply Reply Quote 0
                                                                • K
                                                                  Koenvuurens last edited by

                                                                  If you meant no internet on your pc, yeah you didn't set any dns.. So how would you expect your pc to lookup anything?

                                                                  err… sorry... I dont understand that!
                                                                  Would you like to explain that a liiiiiiiiiiiiiiiitle bit more?
                                                                  but I said already in the first post that I ask a lot of questions

                                                                  1 Reply Last reply Reply Quote 0
                                                                  • K
                                                                    Koenvuurens last edited by

                                                                    Oh do I need to set the DNS to the pfSense box? maybe? …

                                                                    1 Reply Last reply Reply Quote 0
                                                                    • johnpoz
                                                                      johnpoz LAYER 8 Global Moderator last edited by

                                                                      you said ethernet, ethernet is not the internet.. That is your local network connection, etc..  which is clearly working if you can access the pfsense webgui via IP address.

                                                                      Normally yes pfsense would dns for your network, but it can be anything you want.  But if your going to setup a static IP and you want that box to resolve say www.google.com then yeah needs dns.. your picture was NOTHING..  So no shit kind of hard to resolve www.google.com or www.pfsense.com or www.cnn.com, etc. etc..

                                                                      An intelligent man is sometimes forced to be drunk to spend time with his fools
                                                                      If you get confused: Listen to the Music Play
                                                                      Please don't Chat/PM me for help, unless mod related
                                                                      2440 2.4.5p1 | 2x 3100 2.4.4p3 | 2x 3100 22.01 | 4860 22.05

                                                                      1 Reply Last reply Reply Quote 0
                                                                      • K
                                                                        Koenvuurens last edited by

                                                                        Sorry about the ethernet/internet problem, I am dutch already I said…(my english is not very good)
                                                                        So... I can just put anything in the DNS box?

                                                                        1 Reply Last reply Reply Quote 0
                                                                        • johnpoz
                                                                          johnpoz LAYER 8 Global Moderator last edited by

                                                                          you can put in anything you want that is a valid nameserver that will resolve what you want.. Putting in say 8.8.8.8 (googledns) isn't going to resolve any local stuff that pfsense would know about, etc.

                                                                          An intelligent man is sometimes forced to be drunk to spend time with his fools
                                                                          If you get confused: Listen to the Music Play
                                                                          Please don't Chat/PM me for help, unless mod related
                                                                          2440 2.4.5p1 | 2x 3100 2.4.4p3 | 2x 3100 22.01 | 4860 22.05

                                                                          1 Reply Last reply Reply Quote 0
                                                                          • K
                                                                            Koenvuurens last edited by

                                                                            So …? Do I need to put in the dns box 8.8.8.8 ?
                                                                            also I already tried that and still not getting internet

                                                                            1 Reply Last reply Reply Quote 0
                                                                            • johnpoz
                                                                              johnpoz LAYER 8 Global Moderator last edited by

                                                                              So from the web gui, go to diag, dns lookup - can you look up www.google.com for example

                                                                              Go to diag, ping - can you ping 8.8.8.8 ?  See attached screenshots

                                                                              If you can not get to the internet, how are you posting this stuff?




                                                                              An intelligent man is sometimes forced to be drunk to spend time with his fools
                                                                              If you get confused: Listen to the Music Play
                                                                              Please don't Chat/PM me for help, unless mod related
                                                                              2440 2.4.5p1 | 2x 3100 2.4.4p3 | 2x 3100 22.01 | 4860 22.05

                                                                              1 Reply Last reply Reply Quote 0
                                                                              • K
                                                                                Koenvuurens last edited by

                                                                                I post these posts with my 2nd link to the internet, but want do put an better router inbetween it.
                                                                                See attachments.




                                                                                1 Reply Last reply Reply Quote 0
                                                                                • K
                                                                                  Koenvuurens last edited by

                                                                                  but want do put an better router inbetween it.

                                                                                  I mean an powerfuller router with 6 links( 1 WAN and 5 LAN) and a WIFI- card.

                                                                                  1 Reply Last reply Reply Quote 0
                                                                                  • K
                                                                                    Koenvuurens last edited by

                                                                                    Can somebody help …?

                                                                                    1 Reply Last reply Reply Quote 0
                                                                                    • First post
                                                                                      Last post