Pfsense + Thomson ST510

cpjitservices

Hi,

If I ping - It fails. I posted the output in a previous post.

I'm using DHCP when it doesnt work.. My IP (External Static from ISP) gets assigned to WAN interface, My ISP's gateways also appear in Gateways and I also receive the DNS Server IP's.

IF I set a manual address of '192.168.1.253' on my WAN and a GW of '192.168.1.254' I get Internet access.

As setup in the images - my Internet works - As soon as I set my WAN to DHCP I no longer get internet access and no idea why.

Thanks in advance for all of your help - I appreciate it.

pf1.PNG_thumb

pf2.PNG_thumb

cpjitservices

Hi all,

I have done some screenshots of DHCP on WAN side.

![pf broken.PNG](/public/imported_attachments/1/pf broken.PNG)
![pf broken.PNG_thumb](/public/imported_attachments/1/pf broken.PNG_thumb)

pf_gatewaydhcp.PNG_thumb

pf_gwunnown.PNG_thumb

cpjitservices

For some reason when DHCP is set on WAN, i get IP on interface and receive gateway from ISP but that gateway cannot be reached.

cpjitservices

Any help most appreciated guys!!

Thanks!!

stephenw10

The reason I asked you to ping google.com as well as 8.8.8.8 was to determine if DNS was working. At this point it's probably not relevent since pinging by IP didn't work but the first thing that you see when pinging by URL is:

[2.1.3-RELEASE][root@pfsense.fire.box]/root(1): ping google.com
PING google.com (173.194.34.174): 56 data bytes
64 bytes from 173.194.34.174: icmp_seq=0 ttl=56 time=13.773 ms

You can see that it has resolved the url to an IP.

I notice that the IP you're given when set to DHCP on WAN is still a private address in the 10.0.0.0/8 range. Is that the same type of address that the Thompsom router gets if it's connecting without pfSense?

Steve

stephenw10

If your ISP really is handing out 10/8 IPs, if it's doing CGN for example, then you may have to disable the firewall in the ST510. You probably want to do that anyway.

http://www.petenetlive.com/KB/Article/0000210.htm

If having selected to assign the public IP to a device in the router you can still access the internet by using the routers lan side subnet details manually then I would suggest it has not correctly assigned the public IP.

Steve

cpjitservices

Yes, My ISP's gateway is in the 10. range. (Private range) my thomson router has a 10.0.0.138 IP but this cannot be reached at all when I set my WAN to DHCP.

stephenw10

What subnet is your ISP handing the WAN?
Some ISPs are now handing out /32 subnets via DHCP which is not a standards compliant configuration. Other OSes allow this configuration (Windows, some Linux distros) but FreeBSD does not. There is a workaround.

Steve

cpjitservices

I believe it's a /30.

Not entirely sure - you've got to realize that the ISP we are dealing with here isn;t your usual ISP, they do things very differently.

I'm within this range.

https://apps.db.ripe.net/search/query.html?searchtext=77.86.33.157&searchSubmit=search#resultsAnchor

I'll be honest I think it's a slash /30 but it COULD be A /32

Anyway I can find out ??

stephenw10

Ah, the broadband principality of Hull! ;)

The address in that link is not handed to you then?

Go to Status: Interfaces: in the webgui. All the details handed to you should be there.

Steve

cpjitservices

Screenies:

1.PNG_thumb

2.PNG_thumb

cpjitservices

Any Ideas ?

And thanks by the way I appreciate the help - I'd love to get this working… If I can!!!

I'm lost, I cant think of anything else to try!!

cpjitservices

Would the following work.

I assign an IP on my WAN for example 77.86.33.156….

And my Gateway set that to... the actual IP that I get from DHCP from my ISP ?

Would/Should that work ?

stephenw10

Ah, I just re-read the thread and now it makes more sense. I had assumed that because the gateway being given to you is 10.X.X.X then the IP would similarly be 10.x.x.x. But no.

Ok well the gateway address you are being sent, 10.55.200.44, is outside the subnet of your WAN address which is a real public IP. The subnet mask you're being sent is a /8 which is really weird. Like you say Kcom are not a 'normal' ISP! ::)

The workaround should still apply here but the details you have are very odd. If you connect the router in the normal way, without pfSense, does it too receive these same (or similar) details?

Anyway the workaround for this is to add a route to the gateway address. See:
https://redmine.pfsense.org/issues/972
Specifically at the console enter these two commands:


# route add -net 10.55.200.44/32 -iface rl0
# route add default 10.55.200.44

If that works then you can add the commands to Shellcmd so they run at each boot.

We might need some input from a higher source on this though because it looks….wrong! ???

Steve

cpjitservices

Thanks yes it is an odd setup and yes even usjng the thomson on its own I get alk of the same IP settingd same subnet n everything.

Ok thanks for those commands ill try them when I get chance to get back on my machine.

what exactly will those commands do ???

stephenw10

This is a very old post but may still be relevant:
http://karooforums.net/index.php/topic,483.msg4677.html
I expect to see something similar to that posters gateway settings. The issue you may have is the gateway address you're given changes if you reconnect the modem for whatever reason.

Are you active on the Karoo forum? Maybe time to join if not. There's sure to be some people trying to do something similar there.

Those commands add a route to the gateway IP via your WAN interface, because otherwise pfSense has no idea how to reach it, and then sets the gateway IP as the default route for all traffic.

Steve

cpjitservices

Ok when I do dhcp on the WAN that 10. Adress does appear in gateways… is that not the same thing ?? Its gets this from dhcp.

stephenw10

The same thing as what? What the commands do? Yes except that it cannot be set as default route because without those commands pfSense cannot get to the gateway address, it's outside the subnet of the WAN.

Steve

cpjitservices

Im going to try the commands tonight - will keep you posted!!

Thanks

cpjitservices

@stephenw10 - you beauty!!

those commands worked a treat!!!!