pfSense behind ISP router problem
-
Found out the hard way that my ISP router does not work properly in bridge mode. My pfSense is behind the ISP router is in gateway mode. It is more stable than bridge mode. Wan for pfSense is private IP from router DHCP. Problem is that I have local subnet for my IOT devices that I need to access from internet. I could configure DMZ on ISP router and port forward to IOT devices.
Is there a better way to access my IOT devices from the internet?
-
@gjaltemba
Run a VPN server on pfSense to connect securely to your IoT devices.
https://docs.netgate.com/pfsense/en/latest/vpn/index.html#virtual-private-networks -
pfSense VPN server seems like a better solution. I have tried running a pfSense Openvpn server. It worked when ISP router was in bridged mode. Bridged mode is not stable on ISP router.
Public WAN interface is on ISP router. pfSense WAN is a private IP assigned by DHCP from router. Will try Openvpn server in a double NAT setup.
Thank you for your help with my ISP router problem.
-
@gjaltemba
On the ISP router there should be an option to set pfSense WAN as "exposed host" or DMZ, so that all incoming traffic is forwarded to it.Ensure that the router does not masquerading on forwarded traffic.