How to make bridge between WAN and LAN on 2 ports devices ?

DaddyGo

so I need to attach additional router in bridge mode

this is correctly called, a WiFi router in AP mode
the term bridge is used elsewhere (f.e.: ISP CPE router / modem = modem in bridge mode)

importantly, pfSense also works as a router,, if you set up a router after that, you will get a dual-NAT configuration, which is not good

qtwrk

@DaddyGo yes, but second router will be more like "extender" , instead of a funcionting router.

My current set up is

ISP ---> ISP's router ---> my AX3 pro router in bridge mode.

now I want to replace the default ISP router to pfsense but got stuck there ...

DaddyGo

I want to replace the default ISP router to pfsense

in this case, the correct network topology is possible as follows:

since you wrote that there is ONT in the system then it is an FTTH system (GPON, XPON, etc.)
(if you can connect to the Internet (public IP) from the ONT ethernet port, note: this is not always possible)

ISP ONT to pfSense to internal network (LAN, OPT1, etc.)

ISP ONT to ISP router (IN BRIDGE MODE!!!) to pfSense to internal network (LAN, OPT1, etc.)

this avoids the complicated issue of dual-NAT

qtwrk

ISP ONT to pfSense to internal network (LAN, OPT1, etc.)

yes , I have made pfsense to ONT part working , WAN part is OK , but I can't get it done the internal network working

DaddyGo

I have made pfsense to ONT part working , WAN part is OK

I think I understand your problem from the beginning....(only the details need to be clarified)

I can't help until pictures and settings can be posted on the forum....

just watch pls.:

@jimp
https://forum.netgate.com/topic/155505/no-more-image-upload-by-pasting/2

qtwrk

@DaddyGo Thanks, may I know which settings I need to screenshot? Obviously I can't screenshot every page and tab...

DaddyGo

Obviously I can't screenshot every page and tab...

do not worry...

but, yes you can
this is not possible now due to technical errors alone
if possible sharing, I will be looking forward to your NAT rules

DaddyGo

hallelujah works, again...

qtwrk

You mean the firewall rule ? I tried open all protocol on ANY to ANY , also tried disable firewall in system setting , but none of them works

I am thinking maybe something with NAT ?

qtwrk

Hi,

Please don' t bother it , I have managed to fixed it :)

thing seems just simpler than I thought , no need to bridge anything , just plugin my router into the LAN port ,reset my router , that's it.

Thanks again

Best regards,