Connect Netgate 2100 to Satellite system router firewall switch

wildbill

I live in a rural area and have to depend on Hughes Net for my internet service. I bought a Netgate 2100 hoping to beef up the security on my service. I am using a Hughesnet HT2000W device which connects to a satellite dish. This device has it's own firewall which can be turned off. I cannot place the Netgate device in front of it and have to place it behind it. The HT2000W has four lan ports and of course has 2g and 5g wireless which i plan to cut off and use ethernet instead. I have been trying to make a connection to the netgate. I can create a connection using the WAN port by DHCP from the HT2000W. I don't know if that is the proper thing to do or to use a lan port. I can get a lan port configured but cannot connect to the HT2000W.

Can someone point me in the right direction on how to get it done. I basically need to know what port's to use and how to set them up. Just point me to area's of the netgate installation and I can follow the instructions. The HT2000W uses a private lan network of 192.168.42.0. It also has an ability to enter static routes.

SteveITS

@wildbill You would normally connect the 2100 WAN port to your ISP router/modem/hardware, and any of the LAN ports to your network. So, the 2100 is between them. (the 2100 is a 4 port switch, if you don't have one)

Check out https://docs.netgate.com/pfsense/en/latest/solutions/netgate-2100/initial-configuration.html for the initial setup process.

If the pfSense WAN is in address space 192.168.42.0/24 that should be fine. It's double-NAT but shouldn't affect outgoing connections.

wildbill

@steveits
So if I understand you correctly the WAN port could receive a dhcp address on the 192.168.42.0 network and that address could act as the gateway to the network for the netgate 2100 switch to the other switch ports (four of them) on the hughesnet device?

SteveITS

@wildbill If we assume:

ISP router LAN = 192.168.42.1/24
pfSense WAN = 192.168.42.2/24 with 192.168.42.1 as its gateway

Then
pfSense LAN = 192.168.1.1/24
your PC = 192.168.1.2/24 with 192.168.1.1 as its gateway

Other devices on pfSense LAN would get IPs in the 192.168.1.0/24 subnet also.

wildbill

Ok. I can see it now. Thanks for your help.