Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    pfSense Between Modem and Full Router

    Scheduled Pinned Locked Moved General pfSense Questions
    3 Posts 3 Posters 647 Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • C
      counterfeit7845
      last edited by

      I bought a minnowboard from Netgate and loaded pfSense. I would like to run this firewall between my modem and my router, leaving with firewall settings (dual layer firewall).

      I have my modem connected to ETH0 and pfSense pulls my WAN IP. My router’s WAN is connected to ETH1 and I have assigned it as 10.8.0.1/24 through pfSense.

      I do not get internet to my router.

      My router is set to automatic DHCP for WAN, which I am thinking is the problem? Is there a guide somewhere for this type of setup? I could not find one.

      Thanks

      1 Reply Last reply Reply Quote 0
      • badgastB
        badgast
        last edited by

        Is your modem acting as a bridge? > ETH0 should probably be DHCP, depending on your provider > Check.

        Is your modem a modem? Check if your LAN side of the modem is DHCP or static, I think it's preferrable to have it be static. In your case it should be set to 10.8.0.1

        Have your Router be static, eg. 10.8.0.2 and work from there.
        If youre not that familiar with networking, take a paper and draw every component from top to bottom and note youre settings in it.

        1 Reply Last reply Reply Quote 0
        • stephenw10S
          stephenw10 Netgate Administrator
          last edited by

          It should work like that as long as the settings have been applied correctly and there are no conflicting subnets.

          However you will be (at least) double NATing which just makes things hard if you ever have to configure port forwards etc.

          If you connect the pfSense console does that have a real WAN IP? Can you ping out from there?

          You might have to spoof the MAC address on the WAN if your ISP requires that.

          Steve

          1 Reply Last reply Reply Quote 0
          • First post
            Last post
          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.