Problem with PPPoE

jolut

Hi,
I have a problem to understand this text below, from the handbook;
"More specific: Give it an IP address in the same subnet as the modem, such as 192.168.1.5/24. "
My question is, where do I assign the IP address?

Thanks, Jörgen

From the handbook:
"A PPPoE WAN is actually assigned to a virtual PPPoE adapter, not the physical port.

Under Interfaces > (assign), create a new OPT interface, and assign it to the physical network card that is on WAN. For example, if the WAN on the assignment page is “PPPOE0(re2)”, choose re2, and Save the changes.

In the pfSense webGUI, go to Interfaces > (new OPT interface), and Enable the interface. Give it an IP address in the same subnet as the modem, such as 192.168.1.5/24. Do not set a gateway. Rename the interface to ModemAccess or a similar useful name."

stephenw10

So you are trying to access the modem to see line-stats etc? The actual PPPoE connection is setup and working OK?

This: https://docs.netgate.com/pfsense/en/latest/interfaces/accessing-modem-from-inside-firewall.html

In that case your WAN interface would be assigned as pppoe0 and that ppp connection will be set to use a specific interface, for example it might be igb0. But igb0 itself would not yet be assigned.
You need to assign igb0 as a new interface and then enable that and set the IP there to be in modem subnet.

Steve

jolut

Thanks for the reply :-)
I am new to firewalls and may not understand everything yet :-)
Yes, I would like to access the modem on the WAN side and a switch.
I had some issues and did not understand them, so I did a factory reset.
I then configurated the pfsense to local net 192.168.2.0 (and the SG-1000 to static 192.168.2.1).
It works fine and I can access the internet without problem.
But, before starting to configurate PPPoE, I tried to reach the modem on 192.168.1.1 and I did.
My questions is: Why can I access 192.168.1.1 by a default configuration? The modem is on the WAN side and yes, I can also connect to the switch, at 192.168.1.11.

Thanks, Jörgen

stephenw10

Can you ping the modem at 192.168.1.1 if you test from the firewall at Diag > Ping?
Or open a TCP connection to it from Diag > Test Port?

If you do that but can't access it from a client in 192.168.2.X then you probably need to NAT that traffic out of the WAN so the modem can reply.
Set Outbound NAT mode to hybrid. Add a rule to NAT traffic from the LAN to the modem to the WAN address.

Steve

jolut

@stephenw10 Thanks, I will try that!