• Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login
Netgate Discussion Forum
  • Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login

Orbi Router in routing mode behind pfSense

Scheduled Pinned Locked Moved Routing and Multi WAN
10 Posts 3 Posters 1.6k Views
Loading More Posts
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • G
    genivos
    last edited by Nov 7, 2023, 8:07 PM

    Forgive me if there is a topic already about this issue. I have searched a lot but can't find a good answer.
    The situation is as the following. I want to install my pfSense directly connected to my ISP. Tested and works.
    Behind the pfSense I want to use an Orbi RBR50 in routing mode. I specifically want to stay in routing mode and not AP mode (Bridging) cause I have an Armor subscription what I would like to keep using for now. I know it will be double NAT but that doesn't matter in my case, I don't need UPNP and such on that network behind the Orbi. I'm not using UPNP for security reasons anyways.

    Situation will be then: ISP - pfSense - Orbi - switched LAN
    IP addressing will be: Internet IP ISP -> pfSense <- 10.10.1.x/24 -> Orbi <- 192.168.2.x/24 - switched LAN

    In theory this should work. However, I never got it to work so far. I'm struggling with the limited configuration options in the Orbi mainly.
    Anyone a clue or hint in which direction?

    S 1 Reply Last reply Nov 7, 2023, 10:45 PM Reply Quote 0
    • S
      SteveITS Galactic Empire @genivos
      last edited by Nov 7, 2023, 10:45 PM

      @genivos I have not used Orbi. That said, normally nested routers work like that out of the box. pfSense WAN gets DHCP from ISP router, Orbi WAN gets DHCP from pfSense LAN. All subnets must be unique.

      If you traceroute out from a device behind the Orbi how far does it get?

      Pre-2.7.2/23.09: Only install packages for your version, or risk breaking it. Select your branch in System/Update/Update Settings.
      When upgrading, allow 10-15 minutes to restart, or more depending on packages and device speed.
      Upvote 👍 helpful posts!

      G 1 Reply Last reply Nov 8, 2023, 12:15 PM Reply Quote 1
      • G
        genivos @SteveITS
        last edited by Nov 8, 2023, 12:15 PM

        @SteveITS I checkced once more and I found the culprit. I had VLAN tagging on my Orbi WAN port still on. That's not needed anymore since I have a dedicated port on the pfSense box for my Orbi LAN. So, once turning that off it started working as expected and out of the box as you said, of course.

        Orbi works fine now and clients can connect to the Internet.

        A new challenge now which I am investigating. I'm setting up a VPN on the pfSense. Of course and logically I cannot connect throught the LAN behind the Orbi at this moment. Not sure if that will even work with the Orbi. Thus, VPN - pfSense - Tunnel - Orbi WAN - Orbi LAN. My first guess is to let the tunnel network access the internal LAN but then the Orbi blocks it of course. Going to investigate that as well but perhaps I'm missing something.

        G 1 Reply Last reply Nov 8, 2023, 12:23 PM Reply Quote 0
        • G
          greenlight @genivos
          last edited by Nov 8, 2023, 12:23 PM

          @genivos I haven't used Orbi before, but there is definitely a type of VPN it supports. With this you can connect pfsense and orbi together. If you use openvpn to access pfsense from outside, I don't think there will be a problem. You can do something like below

          OpenVPN > pfsense < Ipsec > orbi

          G 2 Replies Last reply Nov 8, 2023, 12:28 PM Reply Quote 1
          • G
            genivos @greenlight
            last edited by Nov 8, 2023, 12:28 PM

            @greenlight thanks! I will try looking into something like this. Orbi has OpenVPN as well, I was using this before. No IPSEC as I recall.

            1 Reply Last reply Reply Quote 0
            • G
              genivos @greenlight
              last edited by Nov 8, 2023, 7:22 PM

              @greenlight or pehaps someone else, trying to setup an OpenVPN to my Orbi. It's a bit difficult, I can't really configure much other then ports on the Orbi.
              I have the certs imported in pfSense but to make a working VPN from pfSense to Orbi is until now impossible.

              In my client settings file which I get from the orbi are these settings but I can't match them all to the pfSense OpenVPN client configuration.

              client
              dev tun
              proto udp
              remote 10.10.1.1 12973
              resolv-retry infinite
              nobind
              persist-key
              persist-tun
              cipher AES-128-CBC
              comp-lzo
              verb 5

              S G 2 Replies Last reply Nov 8, 2023, 7:32 PM Reply Quote 0
              • S
                SteveITS Galactic Empire @genivos
                last edited by Nov 8, 2023, 7:32 PM

                @genivos If Orbi has a VPN server can you just NAT forward the port from pfSense to the Orbi?

                Pre-2.7.2/23.09: Only install packages for your version, or risk breaking it. Select your branch in System/Update/Update Settings.
                When upgrading, allow 10-15 minutes to restart, or more depending on packages and device speed.
                Upvote 👍 helpful posts!

                G 1 Reply Last reply Nov 9, 2023, 6:50 AM Reply Quote 1
                • G
                  greenlight @genivos
                  last edited by Nov 9, 2023, 6:03 AM

                  @genivos said in Orbi Router in routing mode behind pfSense:

                  remote 10.10.1.1 12973

                  the certificates ip addresses must be orbi router's public ip addresses, which one you import on pfsense.

                  G 1 Reply Last reply Nov 9, 2023, 7:16 AM Reply Quote 0
                  • G
                    genivos @SteveITS
                    last edited by genivos Nov 9, 2023, 7:19 AM Nov 9, 2023, 6:50 AM

                    @SteveITS said in Orbi Router in routing mode behind pfSense:

                    @genivos If Orbi has a VPN server can you just NAT forward the port from pfSense to the Orbi?

                    Good one indeed! That works flawlessly. Problem solved, thanks for the suggestion.

                    1 Reply Last reply Reply Quote 0
                    • G
                      genivos @greenlight
                      last edited by genivos Nov 9, 2023, 7:18 AM Nov 9, 2023, 7:16 AM

                      @greenlight said in Orbi Router in routing mode behind pfSense:

                      the certificates ip addresses must be orbi router's public ip addresses, which one you import on pfsense.

                      Orbi has no public address anymore, since it's behind the pfSens. But I used NAT, works.

                      1 Reply Last reply Reply Quote 0
                      1 out of 10
                      • First post
                        10/10
                        Last post
                      Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.
                        This community forum collects and processes your personal information.
                        consent.not_received