Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    two routers configuration

    Scheduled Pinned Locked Moved General pfSense Questions
    7 Posts 3 Posters 411 Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • V
      vr3alist
      last edited by

      Hi all, not sure I'm posting this in the right area.
      I configured my Netgate 1100 behind my ISP router.
      1100 WAN port connected to my ISP router LAN port
      1100 LAN port to my 8 port switch
      Many devices on the switch : NAS, Hue bridge, wifi AP.
      Everything works well with internet access on each device.

      Is that an ok configuration to have two LAN's ? I mean the initial LAN existing on the ISP router (192.168.1.x) and now the new LAN provided by the 1100 device (192.168.2.x), is that ok ?

      Thank you for your advices.

      Kind regards,

      Alexandre

      JKnottJ 1 Reply Last reply Reply Quote 0
      • JKnottJ
        JKnott @vr3alist
        last edited by

        @vr3alist

        Can you put your ISP router in bridge mode? No need for double NAT.

        PfSense running on Qotom mini PC
        i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
        UniFi AC-Lite access point

        I haven't lost my mind. It's around here...somewhere...

        V 1 Reply Last reply Reply Quote 0
        • V
          vr3alist @JKnott
          last edited by

          @JKnott thank you for answering.

          Yes there's an option on the ISP router to switch from router to bridge.
          The thing is, I'm not comfortable with bridging the ISP router, what guarantees me the ISP won't change the settings in few months ?

          Keeping the ISP router as it is now is reassuring me.

          Is there a problem being in a double NAT situation ?

          Thank you.

          JKnottJ 1 Reply Last reply Reply Quote 0
          • stephenw10S
            stephenw10 Netgate Administrator
            last edited by

            Some things have issues with double NAT, notably anything that needs UPnP. However most things will work just fine.

            If you ever need to setup incoming traffic rules (port forwards) then it needs to be added in both routers so makes it more complex.

            V 1 Reply Last reply Reply Quote 0
            • V
              vr3alist @stephenw10
              last edited by

              @stephenw10 thank you Stephen.
              I don't need upnp at all so it's not a worry.
              On the other hand I will need to open the wireguard port to access my NAS when I'm away from home.
              Which makes me think I must do some research to get to know the settings needed on the IPS router and the 1100 in order to switch the ISP router to bridge mode.
              Regarding the settings on the 1100, If you can point me in the right direction that'd be great.
              Thank you.

              1 Reply Last reply Reply Quote 0
              • stephenw10S
                stephenw10 Netgate Administrator
                last edited by

                If you don't use bridge mode you might be able to set a DMZ IP in the ISP router to forward all traffic to pfSense.

                1 Reply Last reply Reply Quote 0
                • JKnottJ
                  JKnott @vr3alist
                  last edited by

                  @vr3alist said in two routers configuration:

                  what guarantees me the ISP won't change the settings in few months ?

                  What setting would they change? My modem has been in bridge mode for many years.

                  PfSense running on Qotom mini PC
                  i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
                  UniFi AC-Lite access point

                  I haven't lost my mind. It's around here...somewhere...

                  1 Reply Last reply Reply Quote 0
                  • First post
                    Last post
                  Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.