Accessing a modem on wan side from behind lan
-
so i get a dynamic ip via pppoe but my modem is static set to 192.168.2.1? (or 1.1? idk off hand) but I want to be able to access that ip from behind my lan without having to disconnect the router every time. The modem is in bridge mode, I just need a way to access the management interface from behind lan.
What is the best way to do this without unnecessary security risks?
-
Looks like you might want this:
http://doc.pfsense.org/index.php/Accessing_modem_from_inside_firewall
-
FYI, I'm running 2.0 and the process listed in the wiki didn't work for me (dsl in bridge mode with pfsense doing the pppoe). I could ping the modem (192.168.0.1) from the pfsense box, but nothing else on the LAN could. What I did was add the OPT interface, set its IP to 192.168.0.2, and instead of leaving the gateway blank, added a gateway that points to itself (192.168.0.2). I then added a route to the 192.168.0.0 subnet with the OPT int as the gateway. Didn't have to add an outbound NAT entry.
EDIT: I did need to add a NAT entry for it to work right.