How do you configure pfSense to connect its WAN port to a %G hotspot

munson

When my internet service goes down, I would like to connect my Wan Port to my Hotspot as a temporary backup. My hotspot provides a Bogon ip address (example 192.168.x.x). I did not change any firewall rules, except for unblocking bogon networks on the WAN interface. I could not evening ping my hotspot. Any suggestions to get this working, for example what rules do I need to unblock?

Thanks

SteveITS

@munson Bogons are public IPs not assigned to anyone. 192.168.0.0/16 is a private address space for use on LANs.

It should work just fine to use a private IP on WAN. Is that private WAN subnet different than your LAN subnet? Meaning both can't be 192.168.1.0/24, or pfSense won't know where to route packets.

You shouldn't even need to unblock private IPs on WAN. The default LAN-to-any allow rule would allow pinging to the hotspot's LAN IP and the reply (note: it has to be configured to respond to pings) would pass back because pfSense knows it is a reply due to the open connection state.

munson

@steveits
Thanks for you quick response. My internal networks are 192.168.193.x, and 192.168.195.x and my hotspot provides an ip 192.168.2.x. to the pfsense WAN port. I see the WAN IP assignment in pfSense but I cannot access any resource on the internet through pfSense from internal device.

When I connect a single device directly to my hotspot, I have no problem accessing any resource on the internet.

My thought is I don't have pfSense properly configured. (BTW when pfSense works perfectly when connect directly to internet.)

Any clarification would be appreciated.

Eric

SteveITS

@munson said in How do you configure pfSense to connect its WAN port to a %G hotspot:

I cannot access any resource on the internet through pfSense

When you say this, do you also mean pinging by IP (8.8.8.8) to rule out a DNS issue? What does a traceroute show?

munson

@steveits Thanks again. I will try it one more time. My hot spot has a different subnet than the internal networks. It seems really strange that I can't ping my hot spot from either on of my internal networks.

Thanks