Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    "Accessing a CPE/Modem from Inside the Firewall"

    Scheduled Pinned Locked Moved NAT
    3 Posts 3 Posters 293 Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • C
      cwmoriarty
      last edited by cwmoriarty

      I'm running into an issue following the documentation for "Accessing a CPE/Modem from Inside the Firewall": bug -- and was asked to migrate to the forum.

      Note I do not use PPPoE, but a DOCSIS Cable Modem.

      G 1 Reply Last reply Reply Quote 0
      • G
        Gblenn @cwmoriarty
        last edited by Gblenn

        @cwmoriarty
        Perhaps if you provide a bit more details on the CPE/Modem in question. And typically you would find the instructions or information for these things in the manual for your modem.

        If it is set up in "bridge mode", you may still have access to the UI on the default private IP. What you have to do though is to make sure that IP on the modem is different from your pfsense LAN IP.

        The way I had it set up when was using a modem in this way, was the following:

        1. Change the LAN IP on the modem to something different than my pfsense LAN (e.g. 192.168.10.1).
        2. Change to bridge mode - this gave me a public IP on my pfsense WAN port.
        3. Add a static route to 192.168.10.1 at WAN Gateway.

        That's all I had to do to access the UI on the modem which still responded on requests for 192.168.10.1 on the LAN side.

        Obviously this means taking the modem back to default settings which in your case might require factory reset. But if you know the IP address of the modem, and it is already different from your pfsense LAN, then try setting the static route...

        1 Reply Last reply Reply Quote 0
        • provelsP
          provels
          last edited by provels

          You should be able to get that from your manufacturer's docs. Since it's on the far side of the FW, it's no different than going to any external website. My last 2 modems, Motorola and Netgear) used 192.168.100.1 while I use 192.168.0.0/24 inside.

          Peder

          MAIN - pfSense+ 24.11-RELEASE - Adlink MXE-5401, i7, 16 GB RAM, 64 GB SSD. 500 GB HDD for SyslogNG
          BACKUP - pfSense+ 23.01-RELEASE - Hyper-V Virtual Machine, Gen 1, 2 v-CPUs, 3 GB RAM, 8GB VHDX (Dynamic)

          1 Reply Last reply Reply Quote 0
          • First post
            Last post
          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.