Web GUI not loading.

[bobbythomas]

Hi All,

This is the second time I am posting this in the forum. I am facing issues accessing Opnsense Web GUI from the LAN interface. If I use the dynamic dns it's working. If I disable HTTPS I can access the web console. I created a new internal certificate and used it for https without any success. Changed from LibreSSL to openSSL, no success and it doesn't work. Tried different web browsers, but nothing worked. The same access is working over ZeroTier VPN. I can access web console using the same browser but using the ZeroTier interface IP. If I use LAN IP browser doesn't respond.

When I run wireshark capture, I can see that my PC is trying to start a TLS session (TLS hello message) and 3 way handshaking completes, and then my PC sends a TCP RST, I was wondering that this could be some issue related to SSL parameters. But I tried this on different devices and the results are same. Just wondering how I can fix this.

Thanks in advance.

Regards,
Bobby Thomas

[franco]

Hi Bobby,

Sounds like a setup quirk somewhere... IPv4 or IPv6 (DNS resolution may play tricks), NAT reflection, firewall rule setting...

Generally, the GUI listens on all interfaces. If there is a pass rule you can access it. It doesn't matter if it's IPv4 or IPv6. Also try the GUI lockout rule in case port forwards get in the way.

I remember someone reporting an unresponsive GUI some time back because he used the OpenVPN wizard and put a server on TCP 443, which, quite bluntly, should expect to blackhole the GUI, but it wasn't very clear when it was first reported.

Just some general ideas for now. Remote debugging is hard.


Cheers,
Franco

[bobbythomas]

Actually it was working fine for a long time (around an year and half) but after 17.7 upgrade this started. Scratching my head to sort this weird issue. Doesn't seems like it's having any deny rules denying web gui access, infact I can access the Web GUI over the IPSec VPN using that same interface IP, but for some reasons it's not working from LAN.

Thank you,
Regards,
Bobby Thomas

[franco]

Hi Bobby,

That may be that 17.7 had this problem surface, but it still does not sound like a normal issue.

If it works via VPN it suggest that your LAN port from the OPNsense on to the switch to anywhere does weird things, has loops, a bad wifi bridge, asymmetric traffic, a bad cable.

The usual way to find an answer is to respond with new information regarding the issue. The images for 17.1 are still online, so you can try it in live mode with a config import without jeopardising your install.

In any case, if you expect help you need to go one step further out of the comfort zone now.


Cheers,
Franco

[bobbythomas]

Thanks Franco, I will try to run this on a an older version and will update you with my findings.

regards,
Bobby Thomas