Navigation

    Netgate Discussion Forum
    • Register
    • Login
    • Search
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search

    Modem access

    Firewalling
    modem access
    2
    5
    473
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • K
      kcallis last edited by

      For reason that I don't understand, AT&T upgraded the firmware of the Arris BGW210-700 that no longer allowed IP-Passthru to function. I received a replacement gateway, the Arris NVG-599 which now allows for IP-Passthou to work correctly.

      Although I am able to ping the device (using 192.168.1.254), I am not able to access the management interface. I have seen where others have used PPPOE to create an interface, but that is not an option. Is there way to access the management interface so other way?

      1 Reply Last reply Reply Quote 0
      • Gertjan
        Gertjan last edited by Gertjan

        Hi,

        Check out the first link from here https://www.google.com/search?q=pfsense+modem+access&ie=utf-8&oe=utf-8&client=firefox-b ;)

        No "help me" PM's please. Use the forum.

        K 1 Reply Last reply Reply Quote 0
        • K
          kcallis @Gertjan last edited by kcallis

          @gertjan Hence the second sentence in the second paragraph. I don't have the option to create a PPPoE interface for several reasons. First, my pfSense WAN interface is connected to one of the LAN interfaces on the DSL modem. I have setup the modem to provide IP-Passthru to my pfSense box, so it has the pubic IP address for the WAN port.

          Unless I am mistaken, AT&T may use PPPoE authentication, but that is not something that is available for the end user. So for all purposes, DHCP is used for WAN address and that address is passed via IP-Passthru to pfsense. So, thank you for the link, but I read that article prior to my posting my question.

          I think I will see if I can create a VLAN and set a port on my Cisco switch with a untagged 192.168.1.x subnet and allow for tagged MGMT VLAN.

          Gertjan 1 Reply Last reply Reply Quote 0
          • Gertjan
            Gertjan @kcallis last edited by

            I used a PPPoE modem for years.
            Identical to what you described here :

            @kcallis said in Modem access:

            @gertjan Hence the second sentence in the second paragraph. I don't have the option to create a PPPoE interface for several reasons. First, my pfSense WAN interface is connected to one of the LAN interfaces on the DSL modem. I have setup the modem to provide IP-Passthru to my pfSense box, so it has the pubic IP address for the WAN port.

            I had to select "PPPoE" as the "IPv4 Configuration Type" on the WAN interface. The mentioned doc pages worked very well for me.
            This seems somewhat different as what you describe here : If the PPPoE endpoint in your modem, it is actually a router with some sort of DMZ setup (my opinion).

            Unless I am mistaken, AT&T may use PPPoE authentication, but that is not something that is available for the end user. So for all purposes, DHCP is used for WAN address and that address is passed via IP-Passthru to pfsense. So, thank you for the link, but I read that article prior to my posting my question.

            When using PPPoE on pfSense, the modem device is just bridging - and pfSense has to know about user login and password.
            Still, the question is : does your modem has it's own "local LAN interface" ?

            Btw : these days, I can't switch my ISP device to bridge mode anymore. I have now a router-in-front-of-a-router setup. I can still access this ISP router very well (although, not much to do there - ones setup)

            No "help me" PM's please. Use the forum.

            K 1 Reply Last reply Reply Quote 0
            • K
              kcallis @Gertjan last edited by kcallis

              @gertjan That is exactly where the issue is. Once upon a time, AT&T would provide the end use with a simple single port modem that would connect to your router or AP. Now I get these monster routers with wifi, VOIP, and possibly a TV connection. With the Arris BGW210-700, after the latest update, I could not make use of the IP-Passthru (which used to be called DMZ+, and many other names). I ended up getting an older model that the IP-Passthru works, but at the cost of not getting access to the web management interface unless I was physically connected via ethernet.

              As for getting the PPPoE credentials, that is almost a non-starter. Again, back in the good old days, you could actually reset your PPPoE password using AT&T portal, but now, if you are willing to pay a one time fee of $49.00 or a monthly $15.00 a month tech support fee, you are S.O.L if you ask for support. I thought that I would get another switch in the setup and create a VLAN, but that didn't work to well for me. I guess I could use one of my RPi, plug that into the AT&T crap box, and then connect wirelessly to the RPi, but really a PITA!

              1 Reply Last reply Reply Quote 0
              • First post
                Last post