No internet on LAN

[Dexter_23]

i have install OPNsense on a VM on Proxmox Server

the problem is the lan interface can't go to the internet

if i connect to SSH on the OPNsense and ping 8.8.8.8 no problem, but on the LAN i can't ping also the WAN Gateway.

i don't know how to fix the problem

[Ted]

I apologize in advance if this too basic.

Since you can connect via SSH to your OPNsense system, it seems safe to assume that the LAN interface is setup correctly.

Not being able to ping the WAN interface may not be related to the OPNsense configuration. One of my OPNsense systems has a broadband connection over cable and a DSL connection over a phone line. I can ping the cable gateway; I cannot ping the DSL gateway.

Have you created a firewall rule for the LAN interface? There should be at least one rule to allow traffic into the LAN interface.

Good luck.

[Dexter_23]

Hi

this is the screenshoot of the firewall LAN rule:

https://gyazo.com/eed1ec39b0a733ebf45fe5c5903f3576

[Ted]

Thank you for the screenshot.

There are some moving parts that need to work together in a firewall. The default OPNsense setup is very reasonable for common use cases. Setting up a WAN and LAN interface is usually straightforward; NAT is already set up correctly for common use cases. The only firewall rule that needs to be set up is the one to allow LAN traffic; your LAN firewall rules appear to be correct.

That said, there are certainly more than enough other settings to effectively shoot oneself in the foot. Also, sometimes the universe plays tricks on us. More than once, I have created configurations that have broken stuff to the point that a factory reset was my only way out.

Good luck.

[pankaj]

i have install OPNsense on a VM on Proxmox Server

the problem is the lan interface can't go to the internet

if i connect to SSH on the OPNsense and ping 8.8.8.8 no problem, but on the LAN i can't ping also the WAN Gateway.

i don't know how to fix the problem

The rule seems correctly configured and should allow all traffic outside, enable the logging (the icon marked as "i") on the firewall rule so that you can monitor the logs to see what rule is preventing the traffic from going outside. It could be DNS or some glitch with VM in which case you may not see anything at all in the logs.