Messages

1

General Discussion / Re: Unifi's VLAN can't access Internet

« on: November 24, 2024, 01:25:51 pm »

I think the automatically generated outbound NAT rule would only apply to the LAN interface's local network (172.16.16.0/29). Since you're routing other networks behind that, I think you'll have to use manual outbound NAT and create rules to cover them.

Yesterday, I also tried configuring Hybrid NAT or Manual NAT, but it still didn’t work. I don't think it's an issue with NAT because I had previously used PfSense and didn't need to configure NAT, only setting up PPPOE, Gateways, Rules, Static Routes, and I could still access the internet normally.
In OPNSense, I configured it the same way, but it still didn't work

2

General Discussion / Unifi's VLAN can't access Internet

« on: November 24, 2024, 07:34:22 am »

Hello everyone,

Today I am setting up OPNSense for my home network.
This is the my network topology using.
https://i.imgur.com/5taWx3M.png

Currently, I have disabled NAT on the USG router and only configured VLAN, WiFi.
And firewall rules, I have set WAN IN, WAN OUT, and WAN LOCAL as source any -> destination any, protocol any.

On OPNSense, I have configured PPPoE.
Under System -> Gateways, I added the USG IP as 172.16.16.2.
The WAN port is currently connected to another device temporarily, so that's why it is showing as "defunct" in the notifications.https://i.imgur.com/kn5J6lA.png

Under System -> Routes, I set up the static route as shown below.
https://i.imgur.com/ItY1eyN.png

Under Firewall -> NAT, I left the default settings.
https://i.imgur.com/aNA9Fd8.png

Under Firewall -> Rules, I only configured LAN to be "any."
https://i.imgur.com/J0rHRYd.png

However, when I try to access the internet, I can't reach Google.
I tried ping from:
LAN -> USG -> OPNSense (OK)
USG -> OPNSense (OK)
OPNSense -> USG -> LAN (OK)
OPNSense ping to google is ok (OK)
I tried set gateway on Firewall -> Rules -> LAN is interfaces PPPOE but it still can't connect to google
I tried using tracert on my PC, and it only reaches the OPNSense gateway (172.16.16.1), but when trying to reach the internet, it times out.
Has anyone encountered this issue before? Please help me. Thank you very much.