Accessing a modem on wan side from behind lan



  • so i get a dynamic ip via pppoe but my modem is static set to 192.168.2.1? (or 1.1? idk off hand) but I want to be able to access that ip from behind my lan without having to disconnect the router every time.  The modem is in bridge mode, I just need a way to access the management interface from behind lan.

    What is the best way to do this without unnecessary security risks?


  • Rebel Alliance Developer Netgate



  • FYI, I'm running 2.0 and the process listed in the wiki didn't work for me (dsl in bridge mode with pfsense doing the pppoe). I could ping the modem (192.168.0.1) from the pfsense box, but nothing else on the LAN could. What I did was add the OPT interface, set its IP to 192.168.0.2, and instead of leaving the gateway blank, added a gateway that points to itself (192.168.0.2). I then added a route to the 192.168.0.0 subnet with the OPT int as the gateway. Didn't have to add an outbound NAT entry.

    EDIT: I did need to add a NAT entry for it to work right.


Log in to reply