Pfsense setup question CGNAT
-
No worries, thx for taking your time to reply
Unfortunately I canโt make a drawing as I am not at home.
But the situation is this currently
WWW - CGNAT - ISP ROUTER - LAN
And I want it to be
WWW - CGNAT - ISP ROUTER - PFSENSE - LAN
And the WAP could be placed like this
WWW - CGNAT - ISP ROUTER - WAP - PFSENSE - LAN
So the the WAP will be connected to a port on the ISP router and the WAN interface of the PFSENSE is also connected to a Port on the ISP router.
Edit: will I need to setup some block/allow rules to prevent the WAP to access the LAN but the LAN to be able to access the WAP?
-
@Crossy2 A true AP will put those devices on the pfSense WAN network. They are all on the iSP router LAN.
pfSense WAN blocks all incoming traffic by default.
pfSense LAN has an allow all by default so can access devices in WAN.
-
Thx again.
Itโs an asus router I still have I would like to use as AP for the inverters
-
@Crossy2 If it has AP mode then the above applies. Some routers let you plug in only LAN and thus act like an AP. If it will only be a router then you can forward a port to your inverter on its LAN.
-
Yep it has I believe 3 modes and one of those is AP.
I will do some testing and report back but could be a while as I am not at home due to personal circumstances but will report back.
That option to place the AP there is a really great one as it also frees up a port on the Pfsense SG-1100 (I ordered one before I came to this forum, if I knew then what I know I would have ordered a 2100