I've got a client who's having a bit of a weird problem with some access
points. He has a couple of Linksys WAP54Gs and also some Netgear WG602s.
The APs are on his OPT1/WLAN interface and captive portal users can gain
access through them without trouble. He's running 1.21 (generic-pc) with
no other issues (well, PPTP isn't working but forget that...) Traffic
shaping is in use for LAN > WAN and WLAN > WAN. There are very few
firewall rules in use, especially on the LAN side, where there is a
clear LAN -> any rule taking precedence.
The issue is that he cannot access the AP's setup pages from his LAN.
From m0n0wall's Ping page, if you set the interface to WLAN and ping an
AP, it works fine. From any client PC on the LAN, you can't get to any
of the APs. However, there's a printer located on the WLAN (intended for
LAN use) and this works fine. There are specific rules to allow this and
even adding similar/identical rules for the APs changes nothing.
I'm really at a loss here; I've looked over the entire config, tried
rebooting each item etc - with no luck. The only thing that seems even
vaguely plausible is that maybe the APs won't accept traffic from an
address in a different subnet (WLAN is 192.168.2.x/24, LAN is
192.168.8.x/24) but the client assures me he could get to his APs when
he used IPCop before.
I suppose the first question is: If I have a firewall rule permitting
any traffic from the LAN subnet (any protocol, SP, destination, EP),
should I be able to ping things on my WLAN subnet? There are no Block
rules whatsoever on the LAN interface so I'd have thought so.
Any help would be greatly appreciated, this is baffling me! :(