Default OPNSensense IP not opening.

[craigiebaby]

Good day all,

Noob here,
I have recently setup my Qotom PC with OPNsense, somehow I got locked out of my default IP of OPNsense even if I change it or reinstall OPNsense. I'm running the Qotom as my Router through a Unifi Cloud Gateway and all using an Apple MacBook Pro. It worked with my first installation 100% and now I just can't access any installation or IP I use as my default lan ip on my OPNsense Pc.

Your input on this matter will be greatly appreciated.

[bartjsmit]

Can you log into the console? Option 2 will set the IP address.

[craigiebaby]

Hi which console are you referring to. The Unifi console?

[craigiebaby]

I'm locked out of my OPNsense web gui completely even after reinstalling and changing ip addresses.

[meyergru]

You must be a bit clearer in conveying what you try to do. Up to now, this is all guesswork.

You seem to have a Unifi Cloud Gateway in front of your OpnSense - a setup that is known to cause many headaches to beginners. Now you try to "change the IP address" of your OpnSense and lose connectivity to it after doing that.

What is your topology, including subnet ranges? Draw a network plan.

Is it by any chance that you try to set the OpnSense LAN address to something in the range of the Cloud Gateway LAN?

[bartjsmit]

Hi which console are you referring to. The Unifi console?

The keyboard and monitor output of the Qotom PC

[craigiebaby]

I'm using a Qotom PC as my router of which I'm using fibre to my wan of my OPNsense Mini Pc and then into the Wan 1 of my Unifi Gateway Ultra. It worked for a couple of days until I think the latest update which was on Saturday and I also noticed my storage was full and the firmware + updates couldn't be done.

I'm not to sure what happened but when I restarted after the update all hell broke loose and I tried what I could to reinstall changed IP's to diffrent IP.s. Installed a bigger hard drive with more space. I still can't seem to get back into my OPNsense Gui webpage.

[craigiebaby]

Hi all,
My apologies for my late reply.
I can log in my OPNsense console with the keyboard and mouse and I have selected the number 2 but if you are please able to give me the order of what should be deleted as I have a funny feeling that it's some to do with my self assigned certificates that are locking me out. I just tried an another pc and I seem to have the same problem and this is a windows based PC. it says the site doesn't have a certificate.

[craigiebaby]

Hi all,
My apologies for my late reply.
I can log in my OPNsense console with the keyboard and mouse and I have selected the number 2 but if you are please able to give me the order of what should selecting as I have a funny feeling that it's some to do with my self assigned certificates that is locking me out. I just tried an another pc and I seem to have the same problem and this is a windows based PC. it says the site doesn't have a certificate.

[cookiemonster]

A bit unclear what is the problem.
Perhaps best to reassign the interfaces (Option 1), followed by assigning IP addresses (Option 2).
Then you can reach the UI on the ip address assigned on Option 2 which should be the LAN interface.
If you have "self assigned certificates" (whatever that is) problems, we move to fixing that next.

[craigiebaby]

Thanks I will give that a try and let you know ASAP.

[craigiebaby]

Hi,
I tried to do 1 and 2 of which it resigned a new self assigned certificate but yet it still seems to not open the default OPNsense web gui.

I really. am baffled as to what I did to lock myself out like this.

[doktornotor]

Back to basics. Forget about certificates. http://<your.opn.sense.ip> - replace with your LAN IP, as shown in the console. The default LAN. Not any other interface you added but failed to create firewall rules for it. Also, you MUST be connected to that default LAN. Not any other interface.

Does this work?

If not - in console:

Code: [Select]

# sockstat -4 | grep :80
# sockstat -4 | grep :443

Post the output.

[craigiebaby]

Hi,
Here is the output for the 2 lines in my console.

lighttpd 65255 9 tcp4 *:80
lighttpd 65255 7 tcp4 *:443

[doktornotor]

Well, I specifically asked whether accessing OPNsense LAN IP via HTTP from the default LAN works. No answer.

You know what? Unplug that Unifi device. Plug something into the OPNsense LAN. Go test. I'm very sure it works.

I'm using fibre to my wan of my OPNsense Mini Pc and then into the Wan 1 of my Unifi Gateway

I don't feel like debugging some UBNT daisy-chained nonsense with asymmetric routing. What's that "then"? Draw some network diagram for others here.