Cannot load ISP router page
-
Hi,
I am newbie at pfsense. I am having environment where my pfSense is behind ISP router in DMZ (no bridge option here). So far I managed to get the internet going however, I am unable to load the ISP router configuration page.
Basically, this is how it is set up for now:
ISP Router- 192.168.1.2
pfSense WAN side - 192.168.1.3
pfSense LAN side - 192.168.0.1
Clients are pointed to 192.168.0.1 as gateway.I can ping 192.168.1.2 without issues but if I try to open it up in Chrome nothing comes back. So what changes I need to implement to be able to access ISP router fully?
Also second question, and this configuration I was unable to find anywhere else explained and I wanted to check if I am doing this right. To get the internet working I had to go in pfSense under WAN interface and there I had to configure Upstream Gateway to 192.168.1.2 to get internet running. Is this config correct or I am doing something wrong?
Thnx for helping me out.
-
@nicesub said in Cannot load ISP router page:
I can ping 192.168.1.2 without issues but if I try to open it up in Chrome nothing comes back.
You're talking about accessing from a LAN device, I guess? Should work out of the box.
Is your outbound NAT (Firewall > NAT > Outbound) in automatic mode?
Try to clear the browsers cache.To get the internet working I had to go in pfSense under WAN interface and there I had to configure Upstream Gateway to 192.168.1.2 to get internet running. Is this config correct or I am doing something wrong?
This is the correct way to set the ISP router as default gateway when configuring WAN manually.
-
@nicesub have you tried this:
https://docs.netgate.com/pfsense/en/latest/recipes/modem-access.html
My guess is that you are missing the NAT rule...
If this still does not work your antivirus/Internet security solution could be to blame, I know Kaspersky has trouble with modem/routers config/status pages but let's try that NAT rule first...
If it turns out to be Kaspersky causing you trouble I will give you a link to the workaround solution...
Good luck and have a nice day!
Nick
-
@viragomann said in Cannot load ISP router page:
You're talking about accessing from a LAN device, I guess? Should work out of the box.
Is your outbound NAT (Firewall > NAT > Outbound) in automatic mode?
Try to clear the browsers cache.It is in auto mode, its strange. Sometimes it works sometimes it does not. Also I notices on androids it works always.
This is the correct way to set the ISP router as default gateway when configuring WAN manually.
Thnx for confirming it.
@knight said in Cannot load ISP router page:
@nicesub have you tried this:
https://docs.netgate.com/pfsense/en/latest/recipes/modem-access.html
I have not, it seems I need one more adapter for this solution and assign/create OPT?
-
@nicesub said in Cannot load ISP router page:
I have not, it seems I need one more adapter for this solution and assign/create OPT?
Yikes, this assumes a PPPoE connection....
Look at the section called "Configure NAT" and disregard "Configure a new Interface", you already have something similar to what is described there...
Instead of the "ModemAccess" interface choose "WAN"...
Nick
-
@knight said in Cannot load ISP router page:
@nicesub have you tried this:
https://docs.netgate.com/pfsense/en/latest/recipes/modem-access.html
This is not applicable here, since the pfSense WAN interface has a private IP within the routers internal network anyway.
-
@viragomann said in Cannot load ISP router page:
This is not applicable here, since the pfSense WAN interface has a private IP within the routers internal network anyway.
The first part is not (the part called "Configure a new Interface") but isn't the "Configure NAT" part necessary so that the traffic can be redirected to the LAN (which is in another subnet) unless of course he could add a route back to it on the router? Or is that part of the automatic rules? (edit: I think it is, my bad...
I actually do have a PPPoE connection so this is why I have to setup it like this to provide NAT rules for the added interface...)Nick
-
@nicesub said in Cannot load ISP router page:
It is in auto mode, its strange. Sometimes it works sometimes it does not. Also I notices on androids it works always.
Do you mean accessing the router page? Are your android devices behind pfSense or do they directly connect to the router?
You are not using Kaspersky Internet/Total Security by any chance?
Nick
-
@Knight
The outbound NAT is configured automatically by default, so that he can access the router. Therefore I asked for the outbound NAT mode.By default, in automatic mode it translates any traffic from the internal networks into the WAN IP, which is within the routers subnet. So the router sees the requests coming from pfSense WAN address within its internal subnet and will reply to it directly anyway.
The additional NAT is regarding to cases where pfSense has a public WAN , which is connected to a router in bridge mode and the router has an additional private IP on its internal interface for web GUI access.
-
Thank you @viragomann...
Since my own configuration requires this (PPPoE) I had not realized it was not needed when the WAN port was in the same subnet as the router/modem...
I did have to tweak Kaspersky Internet/Total Security here to let it access the web interface, I wonder if his problem might not be something like this.
Have a nice day!
Nick
-
Thank you all for your suggestions, it seems the problems is gone byitself. Hence, I did not poke around as it started working and did not want to break anything as I am all new to pfSense.