Floating issue of the latest (24.1.3_1-amd64), OPNsense.

[def]

The situation is as follows: there is a laptop on it put opsense, in order to connect several devices in one network.

OPNsense 24.1.3_1-amd64
FreeBSD 13.2-RELEASE-p10
OpenSSL 3.0.13
Your packages are up to date.

What my network looks like


What I wanted to do: was to distribute the internet to my home computers, and my phones.

I distribute the Internet over the wire to a computer on the network, through the built-in wi-fi adapter (on opnsense) configured and distributed access to the network and the Internet, everything worked fine but the built-in wi-fi has low power and through the wall nothing works.

I forgot to say that the password (shred key) of the access point created via opsense did not work))) and the access point was open. Even to this day, the feature still doesn't work.

built-in WIFI adapter settings

RULES for built-in WIFI adapter

IPVarnish_VPN4 - GATEWAY
This is the gateway of my IPVarnish VPN. THIS RULE WORKS, and routes all users on the open AP directly to the VPN.
All inactive rules are a consequence of my various experiments to find out why opsense is not forwarding packets correctly.

By the way, can you explain what "Gateway > Null4" means? I haven't found what it means, or I don't understand it.

through it, Internet distribution both directly to the Internet and through a VPN gateway, works perfectly.

I can't get around the problem of weak signal by settings inside OPNsense, so I decided to insert an additional USB Ethernet card (Realtek RTL8152 USB ethernet adapter) and connect the access point through it, thus giving all users a separate network and their own adapter.

I connect a TPlink access point to it, and copy all the parameters from the built-in wifi adapter.

I'm just giving a different address 192.168.21.1/24 instead of 192.168.11.1/24

RULES for AP_WIFI_RLT_TPL I copied from the settings of the already working built-in wifi adapter

Yes I know that the gateway is the default, because I left it after a thousand trials and errors to somehow direct traffic to the internet.

I copied the DHCP settings for Realtek USB (AP_WIFI_RLT_TPL) from the built-in wifi adapter, the only difference is the subnet 192.168.21.1/24 instead of 192.168.11.1/24.

As a result:
in the new Realtek USB network (AP_WIFI_RLT_TPL) NOTHING WORKS except the dhcp server, it gives IP to clients connecting through the access point. and nothing else!

pings and ICMP traffic is allowed on all interfaces

NAT: Outbound Enabled and operating in hybrid mode.

from TP-Link AP > Realtek USB (AP_WIFI_RLT_TPL) > Opnsense - nothing goes through except broadcasting DHCP and giving an IP to my phone.
I don't understand how this can happen when I copied everything from a working WIFI adapter.

Since nothing worked, changed gateways, changed traffic policies. I twisted the RULES as much as I could.
NOTHING WORKED.

I thought maybe it's a hardware problem, and the problem is with my network card.

I decided to swap the adapter assignments, and swap the LAN with the WIFI-TP-Link_AP network.

LAN network worked as before, even 2-3 megabits faster than the built-in card.  But Realtek USB (AP_WIFI_RLT_TPL) > TP-Link AP still doesn't work, packets don't flow, everything is the same. What I understood that the problem is in OPNsene was confirmed.

I tried to put everything back, i.e. swap the interfaces again. But that's where the trouble came in.

Having swapped again, now I not only have no traffic on the AP_WIFI_RLT_TPL network, but also on the LAN interface.

It's fucked up, now no network is working except the WAN.
The LAN rules have not been changed, and still they are not enforced and the traffic on that interface just isn't there.

Have access to OPNsense, I'm only on the internet.


Curtain. 

Do you think this is normal OPNsense operation ?


Reboots, services, laptop itself, swap interfaces, nothing helps only WAN works.

Please help, if something in the incoming parameters is missing, I can send screenshots.