Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Is this possible: Pfsense between wifi AP and ISP routr w/o bridge mode

    Scheduled Pinned Locked Moved General pfSense Questions
    11 Posts 4 Posters 850 Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • J
      Jarhead @roboto
      last edited by

      @roboto
      Why wouldn't it be? Is there a specific reason you're asking?
      Yes, it would work but you would not get a public address on the pfSense WAN port.
      For the vlans, you would just trunk the LAN to switch ports.

      R 1 Reply Last reply Reply Quote 1
      • johnpozJ
        johnpoz LAYER 8 Global Moderator @roboto
        last edited by

        @roboto sure you can double nat, shoot even triple nat.. And normally not see any problems, only issue might be if you need something with a static port nat. Rare, some games maybe, some specific vpn type scenarios. Possible voip, etc. But general user not going to be a problem.

        Only think you need to make sure whatever rfc1918 your getting on the pfsense wan doesn't overlap with a network your using behind pfsense.

        An intelligent man is sometimes forced to be drunk to spend time with his fools
        If you get confused: Listen to the Music Play
        Please don't Chat/PM me for help, unless mod related
        SG-4860 24.11 | Lab VMs 2.8, 24.11

        R 1 Reply Last reply Reply Quote 1
        • JKnottJ
          JKnott @roboto
          last edited by

          @roboto

          If you have IPv6, it won't make it through to your LAN.

          PfSense running on Qotom mini PC
          i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
          UniFi AC-Lite access point

          I haven't lost my mind. It's around here...somewhere...

          1 Reply Last reply Reply Quote 1
          • R
            roboto @Jarhead
            last edited by

            @jarhead appreciate your reply. I ask because I don’t know how to make it happen up front and am going to try to figure it out myself. Not a networking pro.

            I didn’t want to spend a bunch of time only to discover “X never works with Y in that configuration” or some such.

            1 Reply Last reply Reply Quote 0
            • R
              roboto @johnpoz
              last edited by

              @johnpoz Glad to hear it's possible. Pfsense is getting 192.168.1.2 from DHCP on the modem, hich does at least all;ow me to make that permanent.

              I'm just getting started. Any tips on getting the wifi routed? How I think it'll work is: Two interfaces: WAN and something like "LANWifi." Add the firewall rules to allow WAN to pass traffic to everywhere, and LANWifi to do the same.

              I also have PFsense DMZ'd on the ISP modem.

              Should I try to turn off DHCP on the modem and let pfsense handle it? or am I overthinking it.

              johnpozJ 1 Reply Last reply Reply Quote 0
              • johnpozJ
                johnpoz LAYER 8 Global Moderator @roboto
                last edited by

                @roboto said in Is this possible: Pfsense between wifi AP and ISP routr w/o bridge mode:

                Add the firewall rules to allow WAN to pass traffic to everywher

                Huh?? that makes no sense at all.

                An intelligent man is sometimes forced to be drunk to spend time with his fools
                If you get confused: Listen to the Music Play
                Please don't Chat/PM me for help, unless mod related
                SG-4860 24.11 | Lab VMs 2.8, 24.11

                R 1 Reply Last reply Reply Quote 0
                • R
                  roboto @johnpoz
                  last edited by

                  @johnpoz must have a firewall rule to allow wan traffic to pass over to the LAN interface, which is how I understand it.

                  johnpozJ 1 Reply Last reply Reply Quote 0
                  • johnpozJ
                    johnpoz LAYER 8 Global Moderator @roboto
                    last edited by

                    @roboto said in Is this possible: Pfsense between wifi AP and ISP routr w/o bridge mode:

                    which is how I understand it.

                    no, if you want to provide access to some service behind pfsense from the internet. Then you would need a port forward.

                    An intelligent man is sometimes forced to be drunk to spend time with his fools
                    If you get confused: Listen to the Music Play
                    Please don't Chat/PM me for help, unless mod related
                    SG-4860 24.11 | Lab VMs 2.8, 24.11

                    R 1 Reply Last reply Reply Quote 1
                    • R
                      roboto @johnpoz
                      last edited by

                      @johnpoz To be precise I want to allow all regular, normal traffic to the Lanwifi through the pfsense, so that I can use my mesh AP and not mess with the crap ISP modem/router

                      johnpozJ 1 Reply Last reply Reply Quote 0
                      • johnpozJ
                        johnpoz LAYER 8 Global Moderator @roboto
                        last edited by

                        @roboto

                        All inbound traffic from the internet to pfsense is blocked by default. If your wifi client goes to say www.google.com the answer is allowed by the state. There is nothing to do with wan rules.

                        Now if you create a new network, say these vlans or wifi network you would have to create rules on the vlans/networks interface to allow outbound traffic to the internet.

                        An intelligent man is sometimes forced to be drunk to spend time with his fools
                        If you get confused: Listen to the Music Play
                        Please don't Chat/PM me for help, unless mod related
                        SG-4860 24.11 | Lab VMs 2.8, 24.11

                        1 Reply Last reply Reply Quote 1
                        • First post
                          Last post
                        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.