Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Static IP Wan -> no internet

    Scheduled Pinned Locked Moved General pfSense Questions
    26 Posts 9 Posters 12.1k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • johnpozJ
      johnpoz LAYER 8 Global Moderator
      last edited by

      yeah My bad - corrected ;)

      An intelligent man is sometimes forced to be drunk to spend time with his fools
      If you get confused: Listen to the Music Play
      Please don't Chat/PM me for help, unless mod related
      SG-4860 24.11 | Lab VMs 2.8, 24.11

      1 Reply Last reply Reply Quote 0
      • T
        taktje
        last edited by

        My setup is :

        Cable modem

        Router wan ip 82.73.xxx.xxx

        Router lan: DHCP 192.168.11.100 - 192.168.11.255
                        Netmask:    255.255.255.0 
                        Gateway:      192.168.11.1

        Pfsense :WAN            192.168.11.39/24 (static ip)
                    Netmask      255.255.255.0
                    Gateway      192.168.11.1

        Pfsense: Lan              DHCP 192.168.1.10 - 192.168.1.255
                    Netmask        255.255.255.0
                    Gateway        192.168.1.1

        1 Reply Last reply Reply Quote 0
        • pttP
          ptt Rebel Alliance
          last edited by

          And What about  your DNS Servers settings ?

          1 Reply Last reply Reply Quote 0
          • K
            kejianshi
            last edited by

            Here is the thing.  Is this the USA?  If so, they like to hold you hostage with DHCP.
            They will give a consumer an IP via DHCP and change it periodically.
            They could just as easily give you a static IP but they know that if they do that you can run a server there.
            So, they will pull out all the stops to make sure you never get a static assignment to work…

            UNLESS you pay them extra for a "business" connection, which is pretty much the same connection you have now except they don't hamstring you with dynamic IPs and blocked port 25 "for your safety".

            If you pay them more, they will allow what you are trying to do and stop screwing you on port 25.  Its extortion.

            1 Reply Last reply Reply Quote 0
            • K
              kejianshi
              last edited by

              You know what?  It actually takes effort on the part of an ISP to make internet this broke.
              A business connection is basically just an un-tampered-with, unmolested connection with simple bandwidth limits.

              (End of ISP rant - My advice is go with the DHCP setup on WAN and get yourself a DynDNS account)

              1 Reply Last reply Reply Quote 0
              • D
                doktornotor Banned
                last edited by

                To move this somewhere: what's exactly "no internet"?

                traceroute 8.8.8.8
                traceroute www.google.com

                1 Reply Last reply Reply Quote 0
                • K
                  kejianshi
                  last edited by

                  I had the exact same thing happen to me and none of my settings were wrong.  Doesn't take a genius to type in an IP address and a subnet.
                  However, I knew what was going on.  Its the ISP - If you want a static IP they will make you buy one.

                  1 Reply Last reply Reply Quote 0
                  • pttP
                    ptt Rebel Alliance
                    last edited by

                    @kejianshi:

                    I had the exact same thing happen to me and none of my settings were wrong.  Doesn't take a genius to type in an IP address and a subnet.
                    However, I knew what was going on.  Its the ISP - If you want a static IP they will make you buy one.

                    Where, the ISP comes to Play in the OP Scenario ?

                    Setup:

                    Cable modem -> router -> Pfsense Wan -> Pfsense Lan -> PC

                    My setup is :

                    Cable modem

                    Router wan ip 82.73.xxx.xxx

                    Router lan: DHCP 192.168.11.100 - 192.168.11.255
                                    Netmask:    255.255.255.0 
                                    Gateway:      192.168.11.1

                    Pfsense :WAN            192.168.11.39/24 (static ip)
                                Netmask      255.255.255.0
                                Gateway      192.168.11.1

                    Pfsense: Lan              DHCP 192.168.1.10 - 192.168.1.255
                                Netmask        255.255.255.0
                                Gateway        192.168.1.1

                    it's a seperate router.

                    i know i am doing double nat.
                    i am  testing pfsense at home for fun.

                    why does everything works fine When  the  wanside get's An ip from dhcp?
                    i don't see why setting a static ip/24 and gateway of 192.168.11.1 won't work

                    1 Reply Last reply Reply Quote 0
                    • K
                      kejianshi
                      last edited by

                      Hmmm.  I was under the impression he was trying to static IP on the pfsense connected to the modem.
                      That might have been wrong and if so, then yeah - My rant wouldn't apply.

                      If he is double NATing, should be easy so long as OP assigns different IP to the WAN on pfsense2 than is on pfsense1, puts it outside the DHCP range on the LAN (assuming DHCP is running) and unchecks the block private IP block.

                      1 Reply Last reply Reply Quote 0
                      • chpalmerC
                        chpalmer
                        last edited by

                        taktje-

                        Can you ping your cablemodem through the pfsense box?

                        c:>ping 192.168.100.1

                        Triggering snowflakes one by one..
                        Intel(R) Core(TM) i5-4590T CPU @ 2.00GHz on an M400 WG box.

                        1 Reply Last reply Reply Quote 0
                        • T
                          taktje
                          last edited by

                          Are you kidding me?

                          There is nothing to ping at 192.168.100.1

                          cable modem gives a wan ip to my router of 82.73.xxx.xxx

                          I think it's a DNS issue.

                          I set everything to "default settings" (again) and try again.

                          1 Reply Last reply Reply Quote 0
                          • D
                            doktornotor Banned
                            last edited by

                            As already requested a couple of hours ago…

                            traceroute 8.8.8.8
                            traceroute www.google.com

                            1 Reply Last reply Reply Quote 0
                            • K
                              kejianshi
                              last edited by

                              So, by doing this for fun, you mean having fun watching us chase our tails?

                              1 Reply Last reply Reply Quote 0
                              • T
                                taktje
                                last edited by

                                Problem solved  :D

                                Had wrong DNS settings.

                                And i'm doing this for fun and to learn.
                                My goal is to setup a hotspot at a campground with Pfsense and some Ubiquiti Nanostations M2 (great stuff).

                                Thx all

                                1 Reply Last reply Reply Quote 0
                                • K
                                  kejianshi
                                  last edited by

                                  doktornotor - I think you were on the right track way back.

                                  1 Reply Last reply Reply Quote 0
                                  • T
                                    taktje
                                    last edited by

                                    i know.

                                    lack of time and some private stuff.
                                    have not worked on pfsense for a long time so i am starting from the  beginning.

                                    1 Reply Last reply Reply Quote 0
                                    • First post
                                      Last post
                                    Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.