setting up my pfsense router

[Brave_skykorn]

my wan is set to 192.168.1.81/24
my Lan is set to 172.16.32.1/24
I did this so i knew for a fact my Lan would be separate. and yet I cant reach the Web browser extension for PFsense.

 

[louie1961]

Your WAN IP should probably be controlled by the WAN device (modem, ONT, whatever)

 

[Brave_skykorn]

Right but here's the thing. My default gateway is 192.168.1.1/24 so I set up my want to be exactly that. So what did I do wrong?

 

[louie1961]

Did you assign the IP or was it assigned by DHCP?

 

[Brave_skykorn]

Ooh that might be the issue isn't it? I might have also messed it up in the instillation because I know I set up one of my bridges to be 192.168.1.100 but I think I allowed dhcp and it changed it to I think the wan. So I guess I try to set the 192.168.1.81 or whatever it was to 192.168.1.100?

 

[louie1961]

I would let it get the IP via DHCP

 

[Brave_skykorn]

so I have that. I pinged my lan from the pfsense CLI and recieved all packets. but I STILL cant reach the web version.

 

[SteveITS]

To clarify, when you connect to or ping 172.16.32.1 from a 172.16.32.x IP you get a timeout?

 

[Brave_skykorn]

No. My router and computer is 192.168.1.x IP. I thought I was supposed to leave the lan on the same subnet and the wan on a different one.

 

[Brave_skykorn]

Actually what's even worse is that on the actual computer I can't ping 172.16.32.1. but I can in the actual pfsense CLI.

 

[SteveITS]

WAN has no firewall rules allowing access. You can connect from pfSense LAN or disable the firewall to connect: https://docs.netgate.com/pfsense/en/latest/troubleshooting/locked-out.html. Or change IPs on pfSense console.

pfSense should be between your network and your ISP.

 

[Brave_skykorn]

thank you so much. i disabled the firewall rules and now i can connect with wan. I will just quickly configure it and get it secured. thank you so much for helping me.