What am I doing wrong? Interface is not getting Internet

[bcart167]

On port 0 is WAN. This port is set to DHCP because its getting its IP from my NBN box - and that seems to be fine.

On port 1 is WLAN. It's a wireless router working in AP mode and that works flawlessly. I can get Internet to anything the has connected the WiFi AP - both is wirelessly and Ethernet.

On Port 2 is a Switch that at the moment has no restrictions on it. The devices that connect to the switch get DHCP but no Internet and have no idea why. I am using DNSmasq + Unbound.

I assigned the 3rd port the router (igc2) and assigned it a static IP of 10.10.10.5. Back on my computer (which is connected to the Switch), says that the default gateway, DHCP and DNS are all 10.10.10.5. The routers IP is 10.10.10.1 which is what I have the WLAN interface (static IP) configured to. I don't know why I did it like that or how that works but it does. Just to add confusion, according to the leases under DNSmasq, the Switch is coming up as 10.10.10.93 and is attached to the WLAN interface for some reason - I have no idea why.

I know this is probably very simple but I have clearly overlooked something. I would appreciate any kind of help.
Thanks.

[Patrick M. Hausen]

Did you create a firewall rule permitting devices connected to the switch to access the Internet? OPNsense comes with a default rule "allow all" on the LAN port (which your AP seems to be connected to) but for each port you add you must create a matching rule yourself.

[meyergru]

I think this is even more basic: If your AP works on one port, you would either have to set up a LAGG to use the LAN also on a second port or attach the switch to the working LAN port and attach everything including the AP to that switch.

You cannot assign more than one port with the same network, see this, #1 and #2.

[bcart167]

Did you create a firewall rule permitting devices connected to the switch to access the Internet? OPNsense comes with a default rule "allow all" on the LAN port (which your AP seems to be connected to) but for each port you add you must create a matching rule yourself.

I just used the allow all on both the LAN interface and the WLAN interface just for testing to ensure everything would come through. But still alas, no Internet.

[Patrick M. Hausen]

Then please show the configuration of all your internal interfaces ...