Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Obihai install trouble

    NAT
    3
    34
    11.9k
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • D
      darkmich
      last edited by

      They all get it via DHCP. I've tried setting the Obihai to both DNS via DHCP (which gives out 192.168.1.254, the pfSense box) and setting it explicitly (8.8.8.8 and 8.8.4.4, Google's DNS servers).

      1 Reply Last reply Reply Quote 0
      • K
        kejianshi
        last edited by

        Hmmmm.  No clue.  Good luck.

        1 Reply Last reply Reply Quote 0
        • D
          darkmich
          last edited by

          Is there a way to simulate the "DMZ" option of Linksys, etc. routers via pfSense? I tried sticking the Obihai on a second LAN interface so I can log the traffic better, but no help. I can see in the states table that there are requests going to and from:

          udp 8.8.8.8:53 <- 192.168.2.250:36837 NO_TRAFFIC:SINGLE
          udp 192.168.2.250:36837 -> 8.8.8.8:53 SINGLE:NO_TRAFFIC

          and via syslog:

          (from Obi202)
          8/29/13 11:55:53.000 PM OBI[-1]: BASE:resolving root.pnn.obihai.com

          (from pfSense)
          8/29/13 11:55:53.000 PM    192.168.2.250.36837 > 8.8.8.8.53[-1]: 11189+ A? root.pnn.obihai.com. (37)
          8/29/13 11:55:55.000 PM    192.168.2.250.42176 > 192.168.2.254.53[-1]: 11189+ A? root.pnn.obihai.com. (37)

          Something seems like it's restricting the replies from the DNS servers from getting back to the Obihai, but I'll be darned if I can figure out what it is. I set up a firewall entry allowing any and all network traffic to the second interface I moved the Obi onto, with no change.

          1 Reply Last reply Reply Quote 0
          • K
            kejianshi
            last edited by

            Are you double NATed?

            1 Reply Last reply Reply Quote 0
            • D
              doktornotor Banned
              last edited by

              And on another note: are you really using 8.8.8.8 as your DNS? Or is your ISP blocking all DNS server but their own?

              1 Reply Last reply Reply Quote 0
              • D
                darkmich
                last edited by

                I shouldn't be double-NATed - my network topology is:

                Cable modem –- pfSense box --- unmanaged switch --- Ethernet devices (including Obihai)

                I'll check what DNS server the ISP gives out and try that as well, but I've never had a problem using other nameservers on my other computers.

                1 Reply Last reply Reply Quote 0
                • D
                  darkmich
                  last edited by

                  Is there a way to assign the Obihai the external IP address via DHCP, similar to how Linksys routers' DMZ function works? (It's a little different than everyone else's concept of DMZ, which makes things a little confusing.) I'm wondering if it's having a problem with NAT, and that's the only way I can think of testing it.

                  1 Reply Last reply Reply Quote 0
                  • K
                    kejianshi
                    last edited by

                    My obihai is not on any DMZ is and not getting any special treatment.  Matter of fact its getting very un-special treatment.  Its just plugged into a switch and NATed same as everything else.

                    Thats not the problem.  Why don't you connect it straight to the modem, upgrade the firmware, then put it behind the pfsense again.
                    This isn't supposed to be so hard.

                    Which version of pfsense are you running?

                    1 Reply Last reply Reply Quote 0
                    • D
                      darkmich
                      last edited by

                      OK - I updated the firmware yesterday through the web interface.
                      SoftwareVersion 3.0.1 (Build: 4041)

                      I'm running pfSense 2.1 beta -
                      2.1-RC1 (i386)
                      built on Thu Aug 22 23:23:56 EDT 2013
                      FreeBSD 8.3-RELEASE-p10

                      I was looking for the Ramdisk support that was introduced in 2.1, which is why I'm running the beta instead of 2.0.3.

                      Can you do me a favor? What does your Obi list in the web interface for the Obitalk status? Specifically, what does it say under the ex-addr?

                      1 Reply Last reply Reply Quote 0
                      • K
                        kejianshi
                        last edited by

                        Lost me.

                        I can access obitalk online and look at the status of things there on the web or I can type in the IP address of my local device and see some statuses there.

                        Please tell me exactly which you want me to look at and exactly describe the menu in question.

                        1 Reply Last reply Reply Quote 0
                        • D
                          darkmich
                          last edited by

                          Sorry - when you first log into the web interface of the Obi, I'm looking at the status page that comes up. The sublistings on that page are WAN status, product info, ObiBT dongle 1 and 2 status, SP1-4 status, OBITalk status, and OBiPlus service status. I'm interested in what it says for the OBiTalk status.

                          1 Reply Last reply Reply Quote 0
                          • K
                            kejianshi
                            last edited by

                            OBiTALK Service Status

                            Parameter Name Value
                            Status                 Normal (User Mode)
                            CallState                 0 Active Calls

                            I'm not sure how that would help you to know.
                            (Mine is an OBi100)

                            1 Reply Last reply Reply Quote 0
                            • D
                              darkmich
                              last edited by

                              Sorry - mine has an additional field listing "ex-addr", which I'm taking to be what the Obi thinks its address is. I was hoping yours would tell me if it was using the address from DHCP or if it actually found the address on the other side of the NAT.

                              1 Reply Last reply Reply Quote 0
                              • D
                                darkmich
                                last edited by

                                And now, without changing anything, it's working on OPT1 but not on the main LAN subnet. I'm more confused than ever, but I'll take it! Thanks for all the help everyone!

                                1 Reply Last reply Reply Quote 0
                                • K
                                  kejianshi
                                  last edited by

                                  You have probably inadvertantly broken something on the LAN firewall or NAT that you haven't broken on OPT1.  Glad its working.

                                  1 Reply Last reply Reply Quote 0
                                  • First post
                                    Last post
                                  Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.