I'm new to OPNSense. To avoid affecting the network, I'm using my personal laptop to run a simulated PPPoE server. Everything works perfectly; the WAN port receives IP addresses and connects to the internet via the console interface normally. However, when I configure the LAN interface, I can't find a way to get it to access the internet.
I used Ping in Interface->Diagnostics and successfully ping 8.8.8.8 and google.com.
Except for setting the IP address to 172.16.10.1/24 and configuring the DHCP server, all other configurations are default.
I tried using ChatGPT and Gemini to resolve the issue, but even if it works, the next day (I still have it in the computer lab and haven't put it into operation yet), after all system unplug and restart, I can't access the network anymore.
What do you mean by the LAN interface accessing the Internet? When WAN is not connected to your uplink but to s simulated PPPoE server you do not have Internet access. The OPNsense firewall goes between the Internet and your LAN and accesses the Internet via WAN. Clients on your LAN access the Internet *through* the firewall.
Perhaps, no DHCP server is set.
Quote from: Patrick M. Hausen on February 09, 2026, 09:17:21 AMWhat do you mean by the LAN interface accessing the Internet? When WAN is not connected to your uplink but to s simulated PPPoE server you do not have Internet access. The OPNsense firewall goes between the Internet and your LAN and accesses the Internet via WAN. Clients on your LAN access the Internet *through* the firewall.
That's not the case. I'm using a simulated PPPoE server, and that server is internet-enabled. I'm saying I can ping 8.8.8.8 through the OpnSense interface, right? Clearly, that proves my PPPoE server is accessible. The reason I'm using a simulated PPPoE server is because I don't want my network to be down for too long during the transition, as I've already configured almost everything with the simulated PPPoE.
Quote from: Karla on February 09, 2026, 10:09:42 AMPerhaps, no DHCP server is set.
I don't think so. The LAN interface is connected to an access point (AP), and when connecting to that AP, it's assigned the correct IP address. And of course, I've disabled the AP's DHCP server.
OK so by "my LAN interface has no Internet access" you mean clients connected to your LAN interface don't? Do you have a switch connected to LAN or did you plug in a PC directly into the firewall port?
Does that client get an IP address and a default gateway via DHCP? Can you ping 172.16.10.1 from the client? Can you ping 8.8.8.8 from the client?
How does you setup look like ?
My home network looks as follows:
Modem/router -> OPNsense -> router.
And the DNS server of OPNsense is the modem/router.
Quote from: Patrick M. Hausen on February 09, 2026, 11:16:06 AMOK so by "my LAN interface has no Internet access" you mean clients connected to your LAN interface don't? Do you have a switch connected to LAN or did you plug in a PC directly into the firewall port?
Does that client get an IP address and a default gateway via DHCP? Can you ping 172.16.10.1 from the client? Can you ping 8.8.8.8 from the client?
That's what I mean. I connected my LAN to the access point (AP) and used my phone to connect to that AP. When I ping 172.16.10.1, it redirects to 172.16.10.2 (AP IP), and when I ping 8.8.8.8, all attempts fail.
Quote from: Karla on February 09, 2026, 11:17:38 AMHow does you setup look like ?
My home network looks as follows:
Modem/router -> OPNsense -> router.
And the DNS server of OPNsense is the modem/router.
My setup:
Modern/Router->PPPoE simulate server->OPNSense->router
OPNSense DNS server is PPPoE simulate server which redirect do modern/Router
Is the AP possibly in router mode and runs its own DHCP server? Better try a wired connection with a PC first.
Quote from: Patrick M. Hausen on February 09, 2026, 12:23:23 PMIs the AP possibly in router mode and runs its own DHCP server? Better try a wired connection with a PC first.
No, it's running in bridge mode, i also turn off dhcp server, i want to running with pc but if i do that then i can't have pppoe because i only have one laptop, i don't wanna mesh with wan config
Show your LAN configuration, please. Did you add a gateway to the LAN interface? Your AP perhaps?
Quote from: Patrick M. Hausen on February 09, 2026, 12:53:50 PMShow your LAN configuration, please. Did you add a gateway to the LAN interface? Your AP perhaps?
This is my LAN configuration: https://ibb.co/vxn1GmMh
My gateway for my LAN interface? I'm not sure, this is my gateway configuration: https://ibb.co/YB5q67qh https://ibb.co/5hM5tcYk
Please place attachments here in this forum. You can upload files after clicking on "Preview". I do not click on external links and I block so called image hosting sites.
Quote from: Patrick M. Hausen on February 09, 2026, 02:53:42 PMPlease place attachments here in this forum. You can upload files after clicking on "Preview". I do not click on external links and I block so called image hosting sites.
Sorry, my bad, here your config image
(https://i.ibb.co/995nL2dh/screencapture-172-16-10-1-interfaces-php-2026-02-09-20-17-14.png) (https://ibb.co/vxn1GmMh)(https://i.ibb.co/pjH9gv9d/screencapture-172-16-10-1-ui-routing-configuration-2026-02-09-20-30-34.png) (https://ibb.co/YB5q67qh)
(https://i.ibb.co/m5DH1zv0/screencapture-172-16-10-1-ui-routing-configuration-2026-02-09-20-32-20.png) (https://ibb.co/5hM5tcYk)
So no gateway entry on the LAN interface. Good, that's how it should be. So when you connect your phone to the WiFi it gets an IP address in the 172.16.10.0/24 network? And ping of 172.16.10.1 results in what exactly? What do you mean by redirect?
Can you see the phone's IP address in the leases on OPNsense?
Can you get a second PC/laptop? It would be way easier to debug this if you could do an "ipconfig /all" or equivalent on a client.
I don't see a mention of NAT or a route for the LAN network on the PPPoE (upstream) provider device. One or the other would normally be required. (I also didn't see the PPPoE-assigned IP offhand.)
Quote from: pfry on February 09, 2026, 04:23:45 PMI don't see a mention of NAT or a route for the LAN network on the PPPoE (upstream) provider device.
That's the default and they wrote they only changed the LAN network and DHCP. 🤷�♂️
Quote from: Patrick M. Hausen on February 09, 2026, 02:53:42 PMI do not click on external links and I block so called image hosting sites.
Sorry, but I have to ask : Why ?!
It's just a simple well known website in this case...
It's a private data farming site or why would anyone provide "image hosting" for free?
Quote from: Patrick M. Hausen on February 09, 2026, 05:27:13 PMIt's a private data farming site or why would anyone provide "image hosting" for free?
If you just block all the ads and tracking and stuff the "damage" should be low in general since you don't tell them much about yourself and in general don't spend a lot of time on those website unless you are active on some kind of forum that uses them all the time...
Quote from: Patrick M. Hausen on February 09, 2026, 03:19:37 PMSo no gateway entry on the LAN interface. Good, that's how it should be. So when you connect your phone to the WiFi it gets an IP address in the 172.16.10.0/24 network? And ping of 172.16.10.1 results in what exactly? What do you mean by redirect?
Can you see the phone's IP address in the leases on OPNsense?
Can you get a second PC/laptop? It would be way easier to debug this if you could do an "ipconfig /all" or equivalent on a client.
Hello there, I'm here. I just somehow figure it out, i don't know what i just did. I just factory reset, making all again and it working(interface, dhcp). But then i have another issue, everytime system shutdown(i simulate power down) then start up again, except WAN, all other interface will not have internet access, that really weird
I tried to change to same networks structure like Karla and got same issue
I see phone's IP address in the leases
But LAN does have Internet access?
OPNsense is not a switch. All other ports except LAN and WAN are unconfigured on a newly installed system. You need an internal switch to connect more than one device.
In case you wanted to create more isolated "LAN like" networks like a guest net, IoT, etc. - it is not sufficient to just assign interfaces, IP adresses, and configure DHCP. OPNsense comes with a global "allow all" rule on LAN, but your new interfaces don't have this. You need to explicitly create it for every additional interface.
Quote from: Patrick M. Hausen on February 09, 2026, 05:52:47 PMBut LAN does have Internet access?
OPNsense is not a switch. All other ports except LAN and WAN are unconfigured on a newly installed system. You need an internal switch to connect more than one device.
In case you wanted to create more isolated "LAN like" networks like a guest net, IoT, etc. - it is not sufficient to just assign interfaces, IP adresses, and configure DHCP. OPNsense comes with a global "allow all" rule on LAN, but your new interfaces don't have this. You need to explicitly create it for every additional interface.
When I first booted the system and configured it, it worked, but after a restart, it didn't.
I know OpnSense isn't a switch, so I have an internal switch.
I assigned "allow all" rules on the LAN and other interfaces, and everything worked perfectly until the restart.
Did the restart possibly revert your system to the default settings?
Quote from: Patrick M. Hausen on February 09, 2026, 06:11:11 PMDid the restart possibly revert your system to the default settings?
no, it's not revert anything.