Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Help a noob out for simple setup

    Scheduled Pinned Locked Moved General pfSense Questions
    14 Posts 4 Posters 979 Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • M
      mkkl
      last edited by

      Thanks for your reply bartkowski!

      It's actually a super simple setup for now.

      Blank Diagram.png

      Yes, I was afraid it is a double NAT issue. Just keep wondering why my Asus router did not have an issue with it...

      Sadly, I cannot put the ISP modem into bridge mode as I do not have access to it, since it is the landlord's property.

      B 1 Reply Last reply Reply Quote 0
      • B
        bartkowski @mkkl
        last edited by

        @mkkl Can you get to pfSense using 172.16.10.1?

        Haha, I didn't read far enough to see you couldn't modify the upstream equipment.

        M 1 Reply Last reply Reply Quote 0
        • M
          mkkl
          last edited by

          Interestingly, this more complicated setup works..
          Capture.PNG

          M 1 Reply Last reply Reply Quote 0
          • M
            mkkl @bartkowski
            last edited by mkkl

            @bartkowski yes i can reach pfSense using 172.16.10.1 :)

            1 Reply Last reply Reply Quote 0
            • M
              mkkl @mkkl
              last edited by

              and it gives me this traceroute:
              Capture5.PNG

              B 1 Reply Last reply Reply Quote 1
              • B
                bartkowski @mkkl
                last edited by

                @mkkl Hmm, does the ISP/dorm use some ACL, allowing the ASUS but not SG-3100. Try copying the ASUS' mac.
                To recap, the issue is that you cannot get to the internet and NOT the fact that Zyxel responds to 192.168.1.1?

                M 1 Reply Last reply Reply Quote 0
                • M
                  mkkl @bartkowski
                  last edited by

                  @bartkowski You're the best!!!

                  Entering a mac address in the mac address field of the WAN interface fixed it!!

                  That's 6 hours of my life I'll never get back. But once again, thanks!

                  B 1 Reply Last reply Reply Quote 0
                  • B
                    bartkowski
                    last edited by

                    Also, I noticed that Asus shows a 10.x IP on WAN, but SG gets a 192.x on WAN - all while connected to the same cable coming from ISP[?] - why?

                    M 1 Reply Last reply Reply Quote 0
                    • B
                      bartkowski @mkkl
                      last edited by

                      @mkkl Glad that helped! Perhaps you should reach out to the dorm IT with the SG-3100's MAC.

                      1 Reply Last reply Reply Quote 0
                      • M
                        mkkl @bartkowski
                        last edited by

                        @bartkowski That is a very good observation and something that I've also pondered on. I have no clue why that is, but now my sg-3100 also gets 10.x WAN ip as the asus did when it worked.

                        As a matter of fact, it turned out that entering any MAC address would fixed the problem, not just the mac of the asus device.

                        GertjanG 1 Reply Last reply Reply Quote 0
                        • GertjanG
                          Gertjan @mkkl
                          last edited by

                          @mkkl said in Help a noob out for simple setup:

                          any MAC address

                          Your WAN interface has - or had - it's own MAC : that was the only one being refused ?
                          And if it was refused, you wouldn't even get an IP (and gateway, and DNS) using DHCP from the upstream router, the Zyxel device used by the tenant, or, you did.

                          No "help me" PM's please. Use the forum, the community will thank you.
                          Edit : and where are the logs ??

                          1 Reply Last reply Reply Quote 0
                          • stephenw10S
                            stephenw10 Netgate Administrator
                            last edited by

                            Yeah I would put money on one of your neighbours having connected their router incorrectly and it's handing out 192.168.1.X IPs. Whoever is admin on that network should be looking for them with a big stick but... 😉

                            Steve

                            1 Reply Last reply Reply Quote 0
                            • First post
                              Last post
                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.