(Solved) Problems with router and wifi

[nickpons666]

Hello everyone and I thank you in advance for your time.

I tell you, I have opnsense configured in proxmox, I give it 2 physical cards, one for the WAN and the other for the LAN.

My operator's modem is connected to the WAN and assigns me the static IP 10.10.3.2.
I have my router connected to the LAN (I tried 2 different ones, Belkin and Tenda, both in AP mode).

When I connect a device via Ethernet I have access to the Internet without problems, the problem comes when I try to connect a device via Wi-Fi, it DOES assign me the opnsense IP, also the gateway and the DNS, but a legend appears on the screen asking for access to the internet and it never connects, from the wifi devices I ping opnsense and if it does, I ping 8.8.8.8 and google but neither of them work.

The configurations are the basic ones, I have not made additional rules or anything like that, at the time I created an additional rule to see if allowing everything to the LAN in any and IPV4/IPV6 protocol but it remained the same, any idea what could be what Is it failing me or is there anything additional I need to add?

Thank you very much for your time. Greetings.

[Seimus]

Check if you have properly NAT configured. As your providers router gave the OPNsense WAN a Private IP its highly possible you are missing proper NAT rule.

Regards,
S.

[nickpons666]

Thank you very much for your reply. Could you give me an idea of ​​how to create the NAT? I have been away from firewalls for a long time and I am practically blank. Thank you.

[Seimus]

Go to Firewall > Nat > Outbound

Make a picture and show what is configured there


From a laptop connected on the WiFi. Do following:

A.

Code Select Expand

ping YOUR_GW_IP

B.

Code Select Expand

tracert YOUR_GW_IP

C.

Code Select Expand

ping 8.8.8.8

D.

Code Select Expand

tracert 8.8.8.8

E.

Code Select Expand

nslookup google.com


Show the outputs of what is in our NAT configuration and the commands (if its linux use traceroute instead of tracert)

Regards,
S.

[nickpons666]

Hello, thanks for answering, I was reviewing the logs and apparently what is happening is that for some strange reason the devices that have Android 14 are forced to use IPv6 and the firewall is disabled, which is why I cannot access the internet even if it is assigned an ipv4, I leave an example of what I found that is blocking the firewall.

Sep 7 12:33:39 LAN Block all IPv6 (1000000003) [fe80::e04e:7a9f:1d74:22aa] [ff02::2] ICMPv6.

I have IPV6 disabled both on the router and in opnsense, other devices that have Android 13 are not forced to use IPv6 and they do browse the internet without problems.

Now what I have to know is how to configure the firewall to allow the outputs that it is blocking.

I investigated how to disable IPv6 in Android 14 but some applications that use the protocol will stop working so it is not an option and I will need to configure IPv6 traffic to be able to have everything working.

[nickpons666]

I was able to solve it, it was much easier than it seemed, I just had to activate:
Firewall->Settings->Advanced
The first 3 reflection options.
*Reflection for port forwarding
*Reflection for 1:1
*Automatic NAT out for Reflection.

With this I now had access to the internet with all my devices without problems, thanks to those who took the time to respond to me, greetings.