OPNsense Forum

English Forums => General Discussion => Topic started by: mflammia on July 01, 2023, 03:43:32 PM

Title: New VLAN unable to access internet
Post by: mflammia on July 01, 2023, 03:43:32 PM
Hi,

Have created a new VLAN. Internally this works, can ping the default gateway set on the firewall of 172.16.11.1. Devices get an IP address from DHCP running on the firewall. Have a rule that is fully open (any / any). Firewall log shows traffic being allowed, nothing blocking.

Assumed a routing / NAT'ing issue, although that seems to me to be configured OK?

Unable to see where I am going wrong, attached screenshots of the various configuration and logs.

https://drive.google.com/file/d/1uQvDNx2DgHTYDQPgurbf7nKqeK2fGxfy/view?usp=sharing (https://drive.google.com/file/d/1uQvDNx2DgHTYDQPgurbf7nKqeK2fGxfy/view?usp=sharing)
https://drive.google.com/file/d/12LZidB3ebAy2rJMgYUeVYy4oVC4BBLd4/view?usp=sharing (https://drive.google.com/file/d/12LZidB3ebAy2rJMgYUeVYy4oVC4BBLd4/view?usp=sharing)
https://drive.google.com/file/d/1bX5JQprzcERiZhGOptB3VaNeT4dT3gCj/view?usp=sharing (https://drive.google.com/file/d/1bX5JQprzcERiZhGOptB3VaNeT4dT3gCj/view?usp=sharing)
https://drive.google.com/file/d/1Xesct-SFUqT9CdFwJaBuYF00YlMnM-0c/view?usp=sharing (https://drive.google.com/file/d/1Xesct-SFUqT9CdFwJaBuYF00YlMnM-0c/view?usp=sharing)
https://drive.google.com/file/d/1Q0nI2jRZuJm5D4OFZBHlYf4R4ltvvhEl/view?usp=sharing (https://drive.google.com/file/d/1Q0nI2jRZuJm5D4OFZBHlYf4R4ltvvhEl/view?usp=sharing)

Many thanks in advance
Title: Re: New VLAN unable to access internet
Post by: mflammia on July 02, 2023, 10:24:50 PM
Figured the problem.

1st issue was that I had added a route for the subnet to the WAN gateway. This was a mistake, as any local subnets do not need this.

2nd issue was that I was configuring the VLAN for a guest captive portal. When I disabled the portal it started working.

Not sure if anyone will make same mistake, but hopefully useful if so.