Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Help a noob out for simple setup

    Scheduled Pinned Locked Moved General pfSense Questions
    14 Posts 4 Posters 1.1k Views 4 Watching
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • M Offline
      mkkl
      last edited by

      Thanks for your reply bartkowski!

      It's actually a super simple setup for now.

      Blank Diagram.png

      Yes, I was afraid it is a double NAT issue. Just keep wondering why my Asus router did not have an issue with it...

      Sadly, I cannot put the ISP modem into bridge mode as I do not have access to it, since it is the landlord's property.

      B 1 Reply Last reply Reply Quote 0
      • B Offline
        bartkowski @mkkl
        last edited by

        @mkkl Can you get to pfSense using 172.16.10.1?

        Haha, I didn't read far enough to see you couldn't modify the upstream equipment.

        M 1 Reply Last reply Reply Quote 0
        • M Offline
          mkkl
          last edited by

          Interestingly, this more complicated setup works..
          Capture.PNG

          M 1 Reply Last reply Reply Quote 0
          • M Offline
            mkkl @bartkowski
            last edited by mkkl

            @bartkowski yes i can reach pfSense using 172.16.10.1 :)

            1 Reply Last reply Reply Quote 0
            • M Offline
              mkkl @mkkl
              last edited by

              and it gives me this traceroute:
              Capture5.PNG

              B 1 Reply Last reply Reply Quote 1
              • B Offline
                bartkowski @mkkl
                last edited by

                @mkkl Hmm, does the ISP/dorm use some ACL, allowing the ASUS but not SG-3100. Try copying the ASUS' mac.
                To recap, the issue is that you cannot get to the internet and NOT the fact that Zyxel responds to 192.168.1.1?

                M 1 Reply Last reply Reply Quote 0
                • M Offline
                  mkkl @bartkowski
                  last edited by

                  @bartkowski You're the best!!!

                  Entering a mac address in the mac address field of the WAN interface fixed it!!

                  That's 6 hours of my life I'll never get back. But once again, thanks!

                  B 1 Reply Last reply Reply Quote 0
                  • B Offline
                    bartkowski
                    last edited by

                    Also, I noticed that Asus shows a 10.x IP on WAN, but SG gets a 192.x on WAN - all while connected to the same cable coming from ISP[?] - why?

                    M 1 Reply Last reply Reply Quote 0
                    • B Offline
                      bartkowski @mkkl
                      last edited by

                      @mkkl Glad that helped! Perhaps you should reach out to the dorm IT with the SG-3100's MAC.

                      1 Reply Last reply Reply Quote 0
                      • M Offline
                        mkkl @bartkowski
                        last edited by

                        @bartkowski That is a very good observation and something that I've also pondered on. I have no clue why that is, but now my sg-3100 also gets 10.x WAN ip as the asus did when it worked.

                        As a matter of fact, it turned out that entering any MAC address would fixed the problem, not just the mac of the asus device.

                        GertjanG 1 Reply Last reply Reply Quote 0
                        • GertjanG Online
                          Gertjan @mkkl
                          last edited by

                          @mkkl said in Help a noob out for simple setup:

                          any MAC address

                          Your WAN interface has - or had - it's own MAC : that was the only one being refused ?
                          And if it was refused, you wouldn't even get an IP (and gateway, and DNS) using DHCP from the upstream router, the Zyxel device used by the tenant, or, you did.

                          No "help me" PM's please. Use the forum, the community will thank you.
                          Edit : and where are the logs ??

                          1 Reply Last reply Reply Quote 0
                          • stephenw10S Offline
                            stephenw10 Netgate Administrator
                            last edited by

                            Yeah I would put money on one of your neighbours having connected their router incorrectly and it's handing out 192.168.1.X IPs. Whoever is admin on that network should be looking for them with a big stick but... 😉

                            Steve

                            1 Reply Last reply Reply Quote 0
                            • First post
                              Last post
                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.