* SOLVED* CBRAS setup question
-
@techsalot
Here's what I found in my notes...C3000Z
- C3000Z becomes a mini router that defines a public IP range, the pfSense router is in that new range
- remember that defining + wiring the 'ethernet ports' is important, especially if you only assign a single port
- DSL1 is a single pair going to the DSL modem, usually tops out about 20Mb/s
- DSL2 is an additional single pair going to the DSL modem, they bond the lines together and can get about 40Mb/s total
- remember to turn off the wifi at the C3000Z
- default IP is 192.168.0.1
- in bridge mode the world icon no longer lights up
- crazy, but even after you properly configure the LAN and WAN in pfSense, you can still get to 192.168.0.1 from your LAN, regardless of the segment (i.e. 192.168.111.111 can still get to 192.168.0.1)
- never use 192.168.0.0 for the LAN, you shouldn't be doing that anyway
-
@vegastech thanks, but I think you misunderstood what I have.
I have NO CL modem.
I have ONT > pfsense
That’s it. It gets the DHCP from CL, not sure how to configure the static on the pfsense.
-
Set the WAN to your assigned static IP/subnet and add a gateway to it using the IP they have have given you for that. It should not be more difficult than that if they are routing that IP to you.
Otherwise they should tell you how it needs to be configured.Steve
-
@stephenw10 it is more difficult than that. That does not work with CBRAS.
https://www.reddit.com/r/centurylink/comments/b9u6mj/centurylink_cbras_what_it_is_and_how_it_works/?utm_source=share&utm_medium=ios_app&utm_name=iossmf
-
Ah, OK, that's fun!
Well you should be able to leave the WAN set to DHCP and apply the statuc IP they gave you as an IPAlias on it. Then you can use it however you wish, 1:1 NAT out of it or use it as the default IP.
Steve
-
@stephenw10 that sounds more like it, I’m just not really sure how to do that exactly.
Check my profile, I left a longer post in a different section with details if you could describe what to do based on that, it would be helpful.
-
Go to Firewall > VirtualIPs. Add a new VIP with type IPAlias on the WAN. Set the static IP and give it a description.
Now go to Diag > Ping and try to ping something external using the new VIP as the source IP. If it succeeds you're good.
Steve
-
@stephenw10 I made an edit above, but I’ll give what you said a try. Thanks.
-
@stephenw10 I re-read this part too...I still want to NAT addresses behind the pfsense. I just want to use the static address to get to my network remotely to use features like VPN.
-
@stephenw10 said in * SOLVED* CBRAS setup question:
Go to Firewall > VirtualIPs. Add a new VIP with type IPAlias on the WAN. Set the static IP and give it a description.
Now go to Diag > Ping and try to ping something external using the new VIP as the source IP. If it succeeds you're good.
Steve
No dice
PING google.com (142.250.68.14) from 71.33.XXX.73: 56 data bytes --- google.com ping statistics --- 3 packets transmitted, 0 packets received, 100.0% packet loss
