Help with WAN configuration problems
-
I have a Netgate SG-1100. It is connected to a wall ethernet port which connects to my main router, a Ubiquiti Dream Router. Whenever I plug my laptop into the LAN port of the Netgate, I get no internet connection. I can get a local IP, as well as the gateway IP. In Pfsense, the Wan interface shows the IP as 0.0.0.0 and when I try to ping 8.8.8.8 with it, it shows 100% packet loss. Can someone please help me out here?
-
@gbeever said in Help with WAN configuration problems:
the Wan interface shows the IP as 0.0.0.0
Well there you go, how would it work if your wan has no IP. What network range are you using the network pfsense wan plugged into?
The network on pfsense wan needs to be different than the network your using its lan. But pfsense needs an IP on its wan if it is ever going to work.
-
@gbeever Also, if that network inside the dreamrouter is private, you need to uncheck “Block Private networks” on pfSense’s WAN port. Otherwise it won’t work properly
-
@johnpoz Then what would the WAN IP of the pfsense be? Would it be my ISP assigned public IP?
-
@gbeever Well thats your Uniquity Dream router that decides that (since the pfSense WAN port is linked to that).
If the Ubiquity is configured as a router/firewall on a standard ISP where you only get one public IP, the the dream router has that IP, and it likely has private networks on it’s LAN ports.
There are to many unknowns to be able to answer your question/solve your problem. What networks have you configured the Dream router to route? Does it run DHCP? Does it NAT? -
@gbeever And why would you want two router/firewalls in your setup anyway? These things are designed to be “alone” and own the ISP WAN side, and provide LAN on the inside.
-
@keyser
On the Dream Router:
All Ethernet Connections are under one network, the default LAN, 10.1.2.0/24.
The router IP and default gateway of the LAN is 10.1.2.1.
It has DHCP enabled. The IP range is 10.1.2.1-10.1.2.254.
Its WAN connection has my ISP given IP address, and it uses DHCPv4. -
@gbeever Okay then - so you are setting up a pfSense on the inside because??
Usually you would just have one or the other in the position where you dream router is now. I would never embark on having a double router/firewall/NAT setup as that is just asking for problems and misconfiguration.But if you want pfSense to sit on the inside, you need a couple of things - alt least:
1: on pfSense WAN you need to uncheck “Disable Private Networks/RFC1918” - otherwise it wont work properly.
2: You need to deside if you want double NAT by having pfSense NAT it’s private network to, or you want to route traffic to the pfSense LAN using a static route in the dream router.
