[NOOB]. Lost all internet connection/ping [SOLVED] Source network match interfac

[MarieSophieSG]

Show your rules on LAN1 and your outbound NAT configuration, please.

Sure ! As soon as i have access to Internet ...
As I just re-plugged the FW box back to its rack, after another full reset from direct access consol on the workbench

GUI access ok, now back to initial setup wizard ....

[MarieSophieSG]

Back to where I was,
DNS set temporarly to 8888, 4444, and only a floating (all to all) access rule
But this time, not even a ping groing through

Back to the bench for full reset ...

If my system is so reluctant to upgrade from 24.7.4 to 24.7.5 i'm already scared about the coming 25.1 !
And lucky me i didn't update my WiFi router to dd-wrt yet, I would be completely lost !

Thank you all for bearing with me, I trully appreciate your efforts !

[Patrick M. Hausen]

Show us that rule and the NAT configuration - how would you expect anyone to help?

[MarieSophieSG]

Show us that rule and the NAT configuration - how would you expect anyone to help?

I'm on it, but for as long as I don't have internet, there is little I can do, unless taking a picture of the screen with my phone (as my only current cnxion is with this)

[Patrick M. Hausen]

Don't you have a local connection to the UI? Do a screen shot, then restore connectivity.

Why are you trying to use floating rules to permit Internet access? Default is "allow all" on LAN. Just clone and adjust that one for your other internal interfaces.

[MarieSophieSG]

Ok, full reset on the bench again,
Plugged it back, no setup wizard
DNS to 8888 and 4444 (let overide by ISP), enable resolver, not DNSESEC (no idea what that is)
Next
IPv4 config: DHCP, all standard
Next
LAN1 q92.168.101.101/24
Next
Root password
Next
Reload
Dashboard: dhcp4 server running, dhcp6 server stopped, iperf perfo test stopped,
WAN_GW 192.168.100.1, then after 2min public address ok, (unplug/replug MoDem)
No internet
Ping ggle from the box: 335packet, 0% loss
Adding floating rule "all to all", all interface, ipv4&ipv6, in&out, to any destination, any port, any protocol
I see the installed plugins are still here, so the reset from the consol was not a full one ?
LAN1 rules

[MarieSophieSG]

Don't you have a local connection to the UI? Do a screen shot, then restore connectivity.

Why are you trying to use floating rules to permit Internet access? Default is "allow all" on LAN. Just clone and adjust that one for your other internal interfaces.

Because i don't know why I don't have internet while it should be working from default (as I just did a reset from console) but if it's not necessary, I'll be happy to delete

Unless as I suspect the "reset to default" doesn't actually reset to default, and I'm due to a 11th reinstall ?

[MarieSophieSG]

I have to take care of my brother, I'll be back in 5hrs

[MarieSophieSG]

LAN1 has Internet ! (I'm writing from Laptop1)

And As I went to "update" I see that I'm stil;l running 24.7.5, so the factory reset didn't do much of a reset ... but here I am, now
I will add LAN2 and LAn3 later this evening ... finger crossed

[Patrick M. Hausen]

Are you really intending to create and manage three separate networks or do you just want to use all available ports on the box?

[MarieSophieSG]

Are you really intending to create and manage three separate networks or do you just want to use all available ports on the box?

I'm intending to use the 4 ETH to use full capability of the box
LAN1, IGC0, 192.168.101.101/24 For the front office switch1
LAN2, IGC2, 192.168.102.101/24 for the Cisco WiFi (AP 192.168.102.102, no DHCP)
LAN3, IGC3, 192.168.103.101/24 for the back office swicth2
All three will be on in parallel,
Some will go through VPN, some have their own VPN
Some will connect to the others, some won't
Most wil have access to 192.168.102.115 and 192.168.103.115 (printer)

[Patrick M. Hausen]

OK, so with LAN working, assign IP addresses to the other interfaces, clone and adapt the allow rule on LAN by default - should "just work".

And definitely not kill your Internet connection via LAN.

If your Internet is dead, you obviously did something different. And to help we would need to know what exactly it is that you did, i.e. see the rules or any other things you configured.

[MarieSophieSG]

Good morning,
LAN1 still has internet with the auto-generated rules (nothing more)
LAN2 now has the 2 (all rule IN) copied from LAN1 still not Internet (Laptop2 doesn't get IP)
LAN3 now has the 2 (all rule IN) copied from LAN1 still not Internet (Laptop3 doesn't get IP)

NAT is by default

Not sure what I have to copy from LAN1 to get LAN2&3 some IPs, knowing the Interface are both /24

[Patrick M. Hausen]

LAN2 now has the 2 (all rule IN) copied from LAN1 still not Internet (Laptop2 doesn't get IP)
LAN3 now has the 2 (all rule IN) copied from LAN1 still not Internet (Laptop3 doesn't get IP)

Enable and configure the DHCP service on both of these interfaces, perhaps? 

Services > ISC DHCPv4

[MarieSophieSG]

LAN2 now has the 2 (all rule IN) copied from LAN1 still not Internet (Laptop2 doesn't get IP)
LAN3 now has the 2 (all rule IN) copied from LAN1 still not Internet (Laptop3 doesn't get IP)

Enable and configure the DHCP service on both of these interfaces, perhaps? 

Services > ISC DHCPv4

Oh yeah that rings me some bell, setting the IP/24 is not enough, one has to go to DHCP and set the service up as well ... I'm on it ! (Laptop2 is now unplugged from LAN2 and plugged to LAN1 as I have to work ....)