Need Setup Config Help

[guest42453]

hi,

New to OPNSense, I installed OPNSense to default setting and I am having an issue connecting to the internet. i have opnsense setup as a second router behind my main router. I set opnsense this way so i can learn how to use it and eventually replace it as my main router.  I have read previous topics, still having trouble.
My set up is my modem, main router, then to a main switch that goes out the rest of the house for access points, tv etc., then protectli vp2420 connect to a pc.

Setup:

Modem-netgear orbi router-switch-protecli VP2420-PC

LAN on protectli is 192.168.20.1
WAN on main network 192.168.10.42

thanks in advance

[CJ]

Is OPNsense getting an IP from the Orbi?  Not connecting to the internet is very vague and you have to start checking all of the various pieces to narrow things down.  What exactly isn't working?

[guest42453]

I get an IP address from Orbi to OPNsense. I ran a ping test from OPNsense to Orbi with 0 percent packet loss. I did a ping test from OPNsense to the pc connected on LAN and got 0 percent packet loss. I can access the GUI on OPNsense. When I look at the dashboard under gateways, the WAN_DHCP has an IP address and the status says it is online. When I look at the interface on the dashboard I get an IP address on WAN and LAN. I try to access the internet with the PC connected to the LAN on OPNsense it say it can't find a DNS. So I'm starting think that's part of the problem. I have also rebooted all devices several times, changed out different cables, moved cables between different ports. I never changed or created any firewall rules or anything like that.

[CJ]

To make sure I understand, this is the configuration you have and you are testing only from this PC that is directly connected to the Protectli.

Internet -> Orbi -> Protectli -> PC

The Orbi is getting a public IP from your ISP and serving the DHCP range of 192.168.10.0/24.
The Protectli is getting 192.168.10.42 from the Orbi and serving the DHCP range of 192.168.20.0/24.

What IP is the PC getting?  What does it show for DNS servers?

What does OPNsense show when you go to Interfaces -> Diagnostics -> DNS Lookup and put in google.com for the hostname and leave the server blank?

[guest42453]

Yes, that is the current set up I have.

The IP for the PC is 192.168.20.180

DNS Lookup gives

Type A
google.com.1 IN A 142.251.32.14
Server 192.168.10.1
15 msec

[CJ]

What DNS settings does the PC show?  If windows, you can run the command "ipconfig /all".

[guest42453]

This is what i get for DNS settings.

IPv4 Address....1982.168.20.10
DHCP Server....192.168.20.1
DNS Server.....192.168.20.1

[CJ]

Run these two commands on the PC and paste the output.

Code: [Select]

nslookup google.com

Code: [Select]

nslookup google.com 192.168.10.1
Can you post a screenshot of the Networking section of your System->General page?

[guest42453]

 nslookup google.com

Server: OPNsense.Home
Address: 192.168.10.1

nslookup google.com 192.168.10.1

Server: unknown
Address: 192.168.10.1

Non-authoritative answer:
Name: google.com
Addresses: 2607:f8b0:4009:819::200e
                 142.251.32.14

 

[CJ]

That picture is helpful, but that's not what I was asking.  In the OPNsense UI, click on System on the left and then General.  If you scroll down there is a Networking section of the UI.  That's what I need the screenshot of.

[guest42453]

Sorry, must of misunderstood what you were saying.

Here is OPNsense system-general-network section of UI

[CJ]

Okay.  What do you have under Services -> Unbound -> Query Forwarding and DNS over TLS?

Can you also post a screenshot of the windows command prompt where you ran nslookup google.com?

[guest42453]

Here are my results for Services -> Unbound -> Query Forwarding and DNS over TLS and  ran nslookup google.com

[CJ]

If you want the quick fix just to get it working, check the Use system nameservers on the Query Forwarding screen.

If you want to continue troubleshooting the issue, please post the Unbound logs.

[guest42453]

Checking the nameservers on Query Forwarding fixed the problem. I now have internet access.

Thank you. I really appreciate the help with fixing the problem.