i can't access to my admin page https://192.168.1.1/

[Moty_p]

hi all
i can't access to my admin page https://192.168.1.1/
Suddenly the web page stop to respond

what can i do?

[cookiemonster]

Impossible to guess what you have for configuration and setup to be able to tell ;)
Perhaps start with disabling captive portal? Check developer tools in your browser to see any clues as to what is happening when you try to connect.

[Vilhonator]

Easiest way to do this is to reset default values.

You can try ssh, if that doesn't work, you need gain physical access to device running opnsense (If your opnsense box doesn't have video output, you need to use console cable, in which case you have to check the serial documentation. All official hardware come with console cable, so all you need is putty, know which serial line to use and what serial speed to use which can be found on documentation).

It is best not to use captive portal unless you have AP that has built in encryption (captive portal doesn't encrypt anything other than passwords, even when you don't have access to internet, wifi traffic is moving locally and it is plain insecure and unencrypted wifi connection, anyone connected to same network is able to sniff traffic on it. And Radius uses MD5 hash, which is no where near hard to crack using websites like https://10015.io/tools/md5-encrypt-decrypt)

If you are familiar with whole webgui stuff, then all you need to do, is access console, choose shell option in console, type pfctl -d (which disables the firewall and you have to manually re enable it with pfctl -e) and hope, it's just firewall blocking your access to webgui. If that doesn't work, you have to pretty much start from scratch.

[meyergru]

There were initial problems with 25.1.5 with the captive portal. Either check you are on the latest and greatest version or try disabling the captive portal.

[Vilhonator]

Oh also disable ClamAV, it doesn't work.

Having antivirus installed on firewall is useless, it can only scan traffic, which is unencrypted (without reverse proxies where data is decrypted before they enter your firewall, all data goes through it unfiltered)

Same with Zenarmor, you aren't able to prevent hackers being able to install backdoors or malware on your machines with it, since all they have to do, is use encrypted connection (discord, https, ssh and list goes on.)

Almost every traffic on the internet is encrypted these days, which reminds me: in command prompt, type "nslookup 192.168.1.1" and try going to the domain instead of using IP (by default I think domain opnsense uses is opnsense.local), if that doesn't work and you use google chrome or firefox, try manually typing https://192.168.1.1:443 on microsoft edge (especially if you hardly ever use it). I have sometimes issues connecting to webgui using IP instead of domain names of certain plugins I use but using domain or clearing all browser data fixes things if time doesn't.