LAN Inception?



  • I don't know how to title this post, and will probably have difficulty explaining what's going on, so here's a nifty chart to help:

    WAN -> Modem/Router -> Switch01 -> Switch02 -> pfSense (LAN Port)

    That's how my pfSense box is connected to my network. I want to connect pfSense to the WAN but for some reason can't. I suspect a DHCP problem but I'm certain the only device handing out IPs is the Modem/Router, plus my desktop is connected to Switch02 and is detecting the WAN just fine. What am I missing here?



  • What subnet is your modem/router combo handing out?  The default subnet for pfSense is 192.168.1.0/24.  Your router combo is probably the same!??

    Can you put your modem in bridge mode and then connect to your WAN side of your pfSense box?



  • What version of pfsense, anything showing in the pfsense logs?
    Do you have a managed switch if so can you access either of them through pfsense?



  • @chpalmer:

    What subnet is your modem/router combo handing out?  The default subnet for pfSense is 192.168.1.0/24.  Your router combo is probably the same!??

    Can you put your modem in bridge mode and then connect to your WAN side of your pfSense box?

    Router subnet is 255.255.255.0, and pfsense is the same (192.168.1.78/24). I have never been successful putting the router into bridge mode, and the reason I haven't connected pfsense to the WAN is because, well, it was easier to plug it into the switch next to my desk so I could configure it  :) Once I finish configuring it I'm connecting it to the WAN and re-enabling DHCP.

    @firewalluser:

    What version of pfsense, anything showing in the pfsense logs?
    Do you have a managed switch if so can you access either of them through pfsense?

    Just updated to 2.2.3 today. All my switches are unmanaged.



  • Have you changed the LAN side of your pfsense box to something different than 192.168.1.0/24?

    If not connecting to the WAN side will not work.



  • @pfBug
    If the Modem/Router in your small drawing is a real router from the ISP and it is making also DHCP
    it could be that your pfSense will be getting even a new IP address as WAN IP! This is really not so
    good and luckily like it perhaps sounds to you. From my point of view you could go now tow different
    way, that will fitting your needs and solve the problem.

    If your switches are only plain unmanaged switches the pfSense as a firewall would not really
    making sense at this place you are setting it up for my understanding, sorry but there fore it
    should be one VLAN where only the router and the pfSense is in. If there are no other devices
    are connected to this switches and only behind the pfSense then it would be running smooth.

    • Set up the ISP or border Router in the so called "bridge mode", so that he is acting only as a modem
      And then connect the pfSense WAN Port to the LAN Port 1 of this device, thats it. If this router is then
      acting only as a modem, there will be no DHCP and WLAN or other services in normal.

    • Set up a router cascade or double NAT would be running straight without any problems.
      But we must know this first, that is this a modem or a router or a router acting as a modem!
      Disable DHCP there on the first router, setting up a static IP at the WAN interface at the pfSense.
      As an example:

    ISP Router:
    Net: 192.168.178.0/24 (255.255.255.0)
    IP: 192.168.178.1/24
    DHCP: off

    pfSense WAN:
    WAN IP: 192.168.178.254/24 (255.255.255.0)
    DNS 1: 192.168.178.1/24
    DNS 2: empty

    pfSense LAN:
    pfSense net: 172.16.1.0/24
    pfSense Gateway IP: 172.16.1.1/24
    DHCP range: 172.16.1.2 - 172.16.1.254/24
    DHCP on: