Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Please help - Connecting to router ui

    Scheduled Pinned Locked Moved General pfSense Questions
    18 Posts 5 Posters 2.9k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • F Offline
      fantasypoo
      last edited by

      Something I just noticed.

      Modem Gui Access  =  192.168.1.254

      Cisco Router Gui Access = 192.168.1.1

      I am unable to remotely access both of them!

      1 Reply Last reply Reply Quote 0
      • F Offline
        firewalluser
        last edited by

        If your modem (192.168.1.254) is in modem only mode using ppoe on the wan interface, then you might have a routing issue depending on how the rest of pfsense is setup.

        Have you tried the reverse setup where you have the pfsense interface assigned an ip address by the cisco router?
        From a factory reset point of view with the cisco, it might be easier and quicker to get back up and running this way, especially if you plan to use the cisco router as a switch as well. The downside with this approach is you may find your pfsense gui ip address changes if you dont give the pfsense a fixed ip in the cisco router.

        A network diag would be useful because in your screen shot, you only show a Lan, vpn and roku interface so I'm guessing you might have the cisco plugged into the lan which is on a different ip address range.

        Capitalism, currently The World's best Entertainment Control System and YOU cant buy it! But you can buy this, or some of this or some of these

        Asch Conformity, mainly the blind leading the blind.

        1 Reply Last reply Reply Quote 0
        • F Offline
          fantasypoo
          last edited by

          @firewalluser:

          If your modem (192.168.1.254) is in modem only mode using ppoe on the wan interface, then you might have a routing issue depending on how the rest of pfsense is setup.

          Have you tried the reverse setup where you have the pfsense interface assigned an ip address by the cisco router?
          From a factory reset point of view with the cisco, it might be easier and quicker to get back up and running this way, especially if you plan to use the cisco router as a switch as well. The downside with this approach is you may find your pfsense gui ip address changes if you dont give the pfsense a fixed ip in the cisco router.

          A network diag would be useful because in your screen shot, you only show a Lan, vpn and roku interface so I'm guessing you might have the cisco plugged into the lan which is on a different ip address range.

          This is a new pfsense install.. 3 days old.  When I tried putting the WAN (192.168.1.254)  in pppoe mode in the interface I was unable to connect to the modem.

          I removed the cisco router completely. 
          Now it is only Modem - pfsense server - PC  …  I still not access to modem  (192.168.1.254)

          I'm completely baffled!

          Out of curiosity I hooked up my PC directly the modem to make sure it worked and took a screenshot.
          Maybe NAT needs to be disabled ? or Upnp ?

          1 Reply Last reply Reply Quote 0
          • V Offline
            viragomann
            last edited by

            Do your LAN rules allow access to 192.168.1.254?

            How is your Outbound NAT set up? Firewall: NAT: Outbound
            There must be a rule for WAN interface, translating any from source = LAN network (10.0.0.1 /24) to interface address.

            1 Reply Last reply Reply Quote 0
            • F Offline
              fantasypoo
              last edited by

              I believe that they do.  I just added the rule you mentioned and took a bunch of screenshots of my configuration.

              1 Reply Last reply Reply Quote 0
              • V Offline
                viragomann
                last edited by

                No, the rule for LAN subnet is missed in outbound NAT. You've just some for 10.0.0.0, which you haven't mentioned as one of your networks. Maybe this was your LAN subnet at first, but you've changed it by now.

                1 Reply Last reply Reply Quote 0
                • F Offline
                  fantasypoo
                  last edited by

                  I don't believe this is a NAT issue.  I disabled NAT completely and am still unable to reach the modem or router user interfaces.

                  1 Reply Last reply Reply Quote 0
                  • V Offline
                    viragomann
                    last edited by

                    If you disable NAT you need static routes right in place to direct the traffic correctly.
                    However, since you haven't disabled it now, the source address of packets leaving pfSense WAN interface is translated to 10.0.0.0. This packets might reach your modem, but it will response to 10.0.0.0, which will be sent to its default gateway, the www, I assume. So response never come back to the PC who requested it.

                    1 Reply Last reply Reply Quote 0
                    • ? This user is from outside of this forum
                      Guest
                      last edited by

                      Out of curiosity I hooked up my PC directly the modem to make sure

                      If this is a real router and not running in the so called "bridged mode" you were build
                      up a so called triple NAT structure that will never allow you to do what you want.

                      If the "modem" is a pure modem or a router set up to the bridged mode that will acting then
                      as a pure modem you would be really able to do so and connect to the Cisco Router for sure.

                      Router with modem:

                      • please set to the bridge mode
                      • disable DHCP and WiFi

                      Cisco router:

                      • SPI & NAT on
                      • WAN IP from the ISP through the modem
                      • 192.168.1.0/24 (255.255.255.0)
                      • IP address 192.168.1.1/24
                      • DHCP off
                      • DNS provider or 8.8.8.8

                      pfSense box

                      • WAN IP address static 192.168.1.254/24

                      • Gateway: 172.16.0.1/24

                      • DNS 1: 192.168.1.1/24

                      • DNS 2: empty

                      • DHCP: off

                      • LAN IP 172.xx.xx.

                      • Gateway 172.16.0.1/24

                      • DNS 1: 172.16.0.1/24

                      • DNS 2: 192.168.1.1/24

                      • DHCP: on if wanted

                      This might be running well after rebooting all the devices for flushing the cache.

                      1 Reply Last reply Reply Quote 0
                      • F Offline
                        fantasypoo
                        last edited by

                        I suspect there is a problem with the cisco router.

                        1 - I connect the router directly to my PC to edit the settings like 'router mode' 'dhcp off' 'wifi password'.
                        2 - I then connect it to the pfsense server and I try to connect to it but am never able to do so.
                        3 - I remove the router from the pfsense server and try connecting directly to my PC again and am unable to do so.  Even after unplugging for 1 minute+  and restarting my computer.  I have to reset the router with a needle in the back and then all the settings are erased and I can connect again.

                        PB052260.JPG
                        PB052260.JPG_thumb

                        1 Reply Last reply Reply Quote 0
                        • First post
                          Last post
                        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.