Modem Access

stephenw10

How is your WAN receiving its address, DHCP or PPPoE?

gbpfsense

This post is deleted!

stephenw10

You need to add a virtual IP (IP alias) to the WAN interface in the modems webgui subnet.

Steve

gbpfsense

This post is deleted!

stephenw10

Looks good to me. :)

Steve

gbpfsense

This post is deleted!

stephenw10

@gbpfsense:

I'm going to make a guide in another forum

Another section here or a completely different forum? I look forward to reading it either way. :)

Steve

Mr. Jingles

Just out of curiousity, could I troll in this thread with my question ( ;D )?

The wiki works for me for VDSL, which is PPPoE. It's on 192.168.1.1, my LAN being on 192.168.2.x; I can access the modem fine.

However: I also do have WAN2, which is cable.

I don't know how to proceed here :-[

I only see my external IP there (so not RFC1918), yet it is assigned to me via DHCP (in the interface properties), so I would have expected an RFC1918, so I know which that modem's address is (for example: 10.0.17.6).

So:

How do I find out what the modem's address is?
Can I do the same in the wiki for DHCP as what works for PPPoE? Or do I need this 'virtual IP' Sir Steve mentions? (no clue what a Virtual IP is in the first place/what you use it for).

Thank you in advance for allowing me to troll here and for perhaps an answer ;D

stephenw10

First off your cable modem may not have a web interface. Get a manual for it and check that. Often if you disconnect it from the cable it will start talking on it's private address and handing out DHCP. Ultimately you can probably run a packet capture on it and find the address.

Assuming it does and that you can find it you then need to use a virtual IP (there are several but we're talking about the IP Alias type) to allow the firewall to talk on a completely different address from the same interface (and subnet in this case).

The virtual IP method used to be described in the wiki because in previous versions of pfSense that was the only way to do it. Now that PPPoE connections appear as their own interface it's much easier. It's still at the way back machine:
http://web.archive.org/web/20111221110314/http://doc.pfsense.org/index.php/Accessing_modem_from_inside_firewall
However having read it it's not relevant any more because the IP alias is now available directly via the webgui.

Wait for gbpfsense's write up. :)

Steve

gbpfsense

This post is deleted!

stephenw10

Nice write-up. :)

Steve