How to make bridge between WAN and LAN on 2 ports devices ?

qtwrk

Hi,

I have a QNAP NAS, and installed pfsense , NAS has 2 ethernet ports , so naturally I was thinking use Port 1 as WAN to connect to my Optical Network Terminal and Port 2 for LAN to connect my router (bridge mode) to connect my other Wi-Fi or LAN devices.

So far , I got WAN part working , ping outside world in pfsense SSH successful , however I am getting trouble to make my LAN traffic go to outside world.

all the guides/tutorials I found , it seems their device has multiple LAN ports , so when they create OPT1 OPT2 OPT3 ...etc , they have all kind of port to select , but in my case , I only got 1 port left

I also "bindly" played around for long time , the best I did is make devices connected to router ping'ing internally , but traffic can not go outside , so I am stuck here...

so what should I do about it ?

any help is much appreciated.

Best regards,

DaddyGo

@qtwrk

Hi,

if I understand correctly, have you virtualized a pfSense on a QNAP NAS?
(I haven’t encountered one and would wonder if it would work well, but anything is possible)

@qtwrk "How to make bridge between WAN and LAN"
such an expression does not exist or would be of great concern

two physical interfaces are sufficient (for very basic settings)
OPT1,2,3 is only an option but not necessarily a must

if you do not have internet access on the LAN, the default LAN rule is missing

qtwrk

@DaddyGo

Hi,

Thanks for reply, yes, virtualized pfsense on QNAP NAS

What do you mean by LAN rule missing? The firewall ? I believe that's not the case, I have tried completely turn off firewall.

Do I not need to set bridge? But directly connect router?

Best regards,

DaddyGo

@qtwrk said in How to make bridge between WAN and LAN on 2 ports devices ?:

@qtwrk "yes, virtualized pfsense on QNAP NAS" = you are very brave

Do I not need to set bridge?
there is no such term, possibility, status to bridge between WAN and LAN

there is something......... called NAT in this place and you can only get through that rules...

unfortunately i can't share pictures because it doesn't work in the forum right now...

@qtwrk "LAN to connect my router (bridge mode)"

it's incomprehensible to me ...???
why is there still a router after (behind) pfSense?

qtwrk

![0_1595512666021_Untitled.png](Uploading 100%) @DaddyGo

Hi,

thanks for the reply , sorry if I didn't my make myself clear.

so here is the situation :

I will use pfsense to connect to my ISP on port 1 as WAN

and my NAS has only 1 LAN port left and it does not have Wi-Fi , so I need to attach additional router in bridge mode , in order for me to use Wi-Fi and other LAN devices

please check my image , see if it makes more clear

alt text

Best regards,

DaddyGo

@qtwrk said in How to make bridge between WAN and LAN on 2 ports devices ?:

so I need to attach additional router in bridge mode

this is correctly called, a WiFi router in AP mode
the term bridge is used elsewhere (f.e.: ISP CPE router / modem = modem in bridge mode)

importantly, pfSense also works as a router,, if you set up a router after that, you will get a dual-NAT configuration, which is not good

qtwrk

@DaddyGo yes, but second router will be more like "extender" , instead of a funcionting router.

My current set up is

ISP ---> ISP's router ---> my AX3 pro router in bridge mode.

now I want to replace the default ISP router to pfsense but got stuck there ...

DaddyGo

@qtwrk said in How to make bridge between WAN and LAN on 2 ports devices ?:

I want to replace the default ISP router to pfsense

in this case, the correct network topology is possible as follows:

since you wrote that there is ONT in the system then it is an FTTH system (GPON, XPON, etc.)
(if you can connect to the Internet (public IP) from the ONT ethernet port, note: this is not always possible)

ISP ONT to pfSense to internal network (LAN, OPT1, etc.)

in case, if it is not possible to connect directly to the ONT, then:

ISP ONT to ISP router (IN BRIDGE MODE!!!) to pfSense to internal network (LAN, OPT1, etc.)

this avoids the complicated issue of dual-NAT

qtwrk

@DaddyGo said in How to make bridge between WAN and LAN on 2 ports devices ?:

ISP ONT to pfSense to internal network (LAN, OPT1, etc.)

yes , I have made pfsense to ONT part working , WAN part is OK , but I can't get it done the internal network working

DaddyGo

@qtwrk said in How to make bridge between WAN and LAN on 2 ports devices ?:

I have made pfsense to ONT part working , WAN part is OK

I think I understand your problem from the beginning....(only the details need to be clarified)

I can't help until pictures and settings can be posted on the forum....

just watch pls.:

@jimp
https://forum.netgate.com/topic/155505/no-more-image-upload-by-pasting/2

qtwrk

@DaddyGo Thanks, may I know which settings I need to screenshot? Obviously I can't screenshot every page and tab...

DaddyGo

@qtwrk said in How to make bridge between WAN and LAN on 2 ports devices ?:

Obviously I can't screenshot every page and tab...

do not worry...

but, yes you can
this is not possible now due to technical errors alone
if possible sharing, I will be looking forward to your NAT rules

DaddyGo

hallelujah works, again...

qtwrk

@DaddyGo

You mean the firewall rule ? I tried open all protocol on ANY to ANY , also tried disable firewall in system setting , but none of them works

I am thinking maybe something with NAT ?

qtwrk

Hi,

Please don' t bother it , I have managed to fixed it :)

thing seems just simpler than I thought , no need to bridge anything , just plugin my router into the LAN port ,reset my router , that's it.

Thanks again

Best regards,