Access modem on wan from lan on pfsense 2.2 rc
-
So your wan is 3gig? your lan port on your router doesn't do anything unless going to the wan.. So yes your lan port should = or exceed your wan bandwidth. So you have a multi gb wan connection?
How does interfaces 3 gig interfaces in a bridge = 10gig fiber switch?
If you need more bandwidth or you want failover for an interface you would LAGG them..
https://doc.pfsense.org/index.php/LAGG_InterfacesI am in Chicago area so Central time for me - I don't have any thing planned today.. On vac til end of the year – yeah!! So PM the info, we can exchange personal email and we can chat over the teamviewer. But until you can get pfsense to ping your modems, nothing behind pfsense is going to be able to get to them.
-
wan is 2 3Mbps/768kbps (down/up) connections. it's more for inter lan stuff than anything else. as for the fiber switch thing 3Gbps is more than 1Gbps. and i wish i had multi gig incoming, but then i probably would be just using the ac router i got with a not crappy firmware, and would not be here.
as for lagg, the load balancing i do is a basic round robin thing with no isp end support (ie: throw things onto whichever connection and go). also, going into lagg only shows one interface (em0/wan1), so i don't think i could program it right either.
teamviewer stuff will be pm'd momentarily.
-
What?? you have a 3mbps connection on the wan.. WTF you trying to use 3 gig connections to your router for?? Complete pointless!!
Draw up this network where you think 3 interface in a bridge is buying you anything?? When your internet connection is 6mbps total??
-
Dude I pinged and emailed, nobody on machine - but you had password saved for pfsense. So fixed it for you. All of 1 minute
So you had no firewall rule off your bridge (10.0.0/24) to allow traffic to 10.0.2/24 - you were sending all traffic to your GW with your rules.. I mentioned if you had default any any rule you would already allow this traffic.
Also you had no nat created for your opt interface on em1 so modem would not know how to get back (unless it had a gateway of your 10.0.2.5 address on pfsense or route to 10.0.0/24, so created that for you.
Do the same thing for mdm1 on em0, but would really like to discuss why you think bridging makes sense??
I waited dude and pinged you, hope you don't mind that I fixed it for you. I did not look or touch anything else.. The instructions are fine as written in docs, maybe some clarification of having to have rules that allow the traffic, and if device your trying to talk to doesn't have route back to your other lan you have to create a nat on that interface.. But to be honest this all pretty basic stuff.
Let me know when you want to discuss your bridge setup, I just can not see how that would ever make sense to do ;)
-
What?? you have a 3mbps connection on the wan.. WTF you trying to use 3 gig connections to your router for?? Complete pointless!!
Draw up this network where you think 3 interface in a bridge is buying you anything?? When your internet connection is 6mbps total??
perhaps this example will show what i mean: transferring multiple large files from lan to wireless (ac 1900 ap), then streaming a video from sat equipment to tablet (or from internet for that matter). that would total over the 1Gbps that the link from the router to the switch has.
as for accessing modem, it looks like i was doing it right, but just not creating the firewall rule (guide never mentioned this). (the nat thing wasn't there when you got on because i was a tad confused, but the first time around i did have one there).
another thing about me is i'm more of a hands on learner, and learn stuff well when doing trial and error and reverse engineering what someone has done to understand how it ticks.
-
"transferring multiple large files from lan to wireless (ac 1900 ap), then streaming a video from sat equipment to tablet (or from internet for that matter). that would total over the 1Gbps that the link from the router to the switch has."
Well 1900 is total for both bands, so your not getting 1900 mbps ;) Also how many streams does wifi client have? Are you on the 2.4 or 5 band, are you using 20, 40 or 80mhz channels. Just because your AC does not even mean you clients are, etc.. Sorry but wifi just doesn't do gig.. AC 5 with 80mhz 3x3 client I see real world about 500, maybe 600 with 1300 data rate connection.
As to from the internet to anything - yes that would use the lan port of pfesnse.. But that 1,000,000,000 bps, your internet total is 6,000,000
You do undstand everything talking to each other on the switch use their own path through the switch.. You sending to pfsense is slowing it down!!! pfsense for one sure isnt forwarding packets at wire speed in a bridge.. ;) And your forcing traffic through its interface that really never should go there.
You have a gig switch. Connect your devices to the gig switch.. It should have a backplane of double its ports.. So for example my sg300 with 10 ports has a 20GB backplane - it can switch 20GBs of traffic at the same time. It was designed to "switch" pfsense is meant to route - completely different!!
The only thing that goes to pfesnse would be traffic to or from the internet. Traffic between devices on your network would never even talk to pfsense, other than maybe for dns, etc..
Here is how you should have your network setup. See attached. When devices talk to each other they go through the switch at full wire speed between each other, they do not even need to talk to pfsense. Pfsense is only gateway OFF that local network - ie the internet, you only have 6mpbs to the internet. The gig connection pfsense has on its lan is more than enough to handle that. If you were printing for example - that doesn't even go through pfsense, if you were watching a movie on your tablet off your dvr/mediaplayer that is full speed between those devices. Whle your laptop is using the internet for example - those converstations have nothing to do with each other and the switch can handle it without any problems at full speed.
You do understand you can get a gig switch for pennies ;) If you don't have one
http://www.amazon.com/TRENDnet-Unmanaged-Gigabit-GREENnet-TEG-S80g/dp/B001QUA6RA
8 Port gig switch $29 to your door!You putting traffic through a bridge is only going to slow it down in the big picture.
So would love to see way your network is physically connected, so we can go over the different paths and bandwith, etc.
-
eh, i might end up doing it your way eventually. if you really want to see a pic that is the mess of cables going all over i can do that. (will also include a visio drawing if i do this because it will look neater)
-
visio, paint, crayon and napkin that you take picture of with your phone.. Some sort of diagram that shows your connection. As I said before it would be RARE that you would ever use a bridge.. There just really is not reason for it these days.
Only time I would think you might do it is when different media types - say you had a fiber card in pfsense and you wanted this fiber network to be on the same network as your normal copper network. In that case you might leverage pfsense to bridge your fiber network to your copper network.
But it would not be best choice - best choice would be to add a fiber connection to your switch where your copper is, etc.
I really can not think of when it would be good idea to bridge vs use a switch to be honest.
Did you get your other modem working. If not I can TV in again and fix it up.
-
i got other modem working once i looked at what you did (and namely the firewall rule that you added). i'm a bit new to pfsense, closest thing i've used to it before would be dd-wrt but that's miles behind what pfsense can do
(links because forum <br />here's images of setup: https://i.imgur.com/xMenQdj.jpg | https://i.imgur.com/ZDlTEkT.jpg<br /><br />and here's a dia drawing to follow along with: https://i.imgur.com/IY8VJSx.png)
-
Yeah that setup makes no sense.. If you want to leave your AP connected, I would put it on its own segment so you can firewall your wifi from the rest of the network. Your sending all your broadcast/multicast traffic out your wifi for no point. And you have no security between wifi and your wired unless your wanting to to be transparent?
If you want it on the same broadcast domain then just plug it into the switch.
As to the deca, again pointless to bridge it to your lan. Why not put that on its own segment as well if you want to have better setup and you have the interfaces.. It is only 100mbps connection as well - what does it talk to on your network? If it does talk to stuff on your network then just connect it to your switch.
You could use a bridge if you wanted to have a transparent firewall between devices on each side of the bridge.. But in your setup I would break put those on their own segments wireless and wired. As to the deca, not sure what use there is of putting that on same segment as your lan or wifi - from my understand it only uses that ethernet connection for internet.
"With DECA coax networking, the DVRs only use your home network for internet access"
So that really should just be on its own segment, bridging it to your network would only slow down your other networks.
So you could still leverage your nics on your pfsense, but just segment your 3 networks.. So you would have LAN network, say 10.0.0/24 and your modem networks (10.0.1,2/24) and then your deca could be 10.0.4/24 and your wifi could be 10.0.5/24 – this gives you easy to mange filewall controls and 3 different broadcast domains to keep the broadcast and multicast noise off those other networks.
-
reason it's all the same is because any device on any of the three networks has to be able to talk to any device on any other network (for instance remote monitoring of applications on wifi devices from a wired desktop. i'm not sure exactly what all the deca bridge does, supposedly it's supposed to allow devices on the network to stream from it, but i've not had much luck with that (also not had the best of luck keeping the receiver from locking up, and that's after updating it). i'll probably stuff everything on the switch once i build a smaller computer that will sit where the ap is now and get some shorter cords so it's less of a mess.
-
"reason it's all the same is because any device on any of the three networks has to be able to talk to any device on any other network"
Then they should all be connected to switch, your bridge is not buying you anything but slower connectivity. My wifi devices can talk to my wired devices - but I have them on 2 segments because my wifi devices sure an the hell don't need to see my wired networks broadcast or multicast traffic.
Everything I read about the deca stuff is your whole home dvr stuff is on the coax network.. The ethernet is just for internet.. What equipment do you have, I am directv user for example - both of my dvrs are on network just from from connection on the back of them. To stream recorded shows to your mobile I do believe you need genie to go.. I don't have genie yet - but I can watch recorded shows from my dvrs on my PC and they are not on the same network segment, etc.
-
yeah, i have the genie, got it as a free upgrade for "moving" after a house fire late last year, eventhough new house is on the same plot of land, just a different area, but i'm not gonna argue with that logic if it means i get free premium stuff.
-
Same here, anybody had any success accesing modem gui?
-
Same here, anybody had any success accesing modem gui?
Works just fine here - see below (modem on 192.168.255.1)
-
My modem is on bridge mode, im not using ppoe, can i use this adding 2nd interface method?
-
My modem is on bridge mode as well… Not sure how's PPPoE related here. This is using a dedicated NIC on pfS with cable plugged to modem's LAN port. This will work as long as your modem has some LAN IP address outside your normal LAN subnet defined on pfSense. If it has none, well then there's nothing to access.
-
Ok yes now i got the idea, yes with one extra nic physically connected to the modem, fixed ip on the modem's subnet you can access it
But i was thinking on the original idea of one virtual ip and the outbound nat rule involving this virtual ip you dont need the extra nic. In fact i had this configuration in 2.0 and it was working ok, but now i cannot get it to work again. Thanks doktornotor
-
Are you referring to this? https://doc.pfsense.org/index.php/Accessing_modem_from_inside_firewall
I don't think that howto is intended for bridged modem setup at all (the NAT just makes no sense for this setup.) As for extra NIC, well… not really needed if using PPPoE, you could recycle WAN for that - but, first of all, that sounds like a hack to me, plus - this NIC is onboard POS unused for anything since it sucks badly.
-
This post is deleted!
