pfSense setup with NAT VDSL Router

Forums › IT Pro and developers › pfSense setup with NAT VDSL Router

drmoorenz

11 posts

Geek

#171821 2-May-2015 01:24

I have my VDSL Router connected to WAN port of my pfSense Router. VDSL Router is on subnet 10.3.13.0/24 and pfSense Router is on subnet 192.168.13.0/24 connect to network via LAN port.

I am having a few issues (only because I do not know enough and have read some guides etc.) but priority issue is:

1) How do I access my VDSL Router web page from LAN network?

Thank you.

Spyware

3818 posts

Uber Geek
+1 received by user: 1366

Lifetime subscriber

#1295465 2-May-2015 07:42

Static route on VDSL router telling it through what gateway it finds the pfSense network, e.g., 192.168.13.0 255.255.255.0 gw 10.3.13.2 (address on WAN interface of pfsense)

Spark Max Fibre using Mikrotik CCR1009-8G-1S-1S+, CRS125-24G-1S, Unifi UAP, U6-Pro, UAP-AC-M-Pro, Apple TV 4K (2022), Apple TV 4K (2017), iPad Air 1st gen, iPad Air 4th gen, iPhone 13, SkyNZ3151 (the white box). If it doesn't move then it's data cabled.

sbiddle

30853 posts

Uber Geek
+1 received by user: 9996

Retired Mod

Trusted

Biddle Corp

Lifetime subscriber

#1295471 2-May-2015 08:29

It's not the answer to your question but why are you using double NAT when it's so easily avoided?

drmoorenz

11 posts

Geek

#1295600 2-May-2015 11:38

First time setup.

My VDSL Router runs a Voice Account which my standard handset hooks up to. I did not want to interfere with that service.

My pfsense router runs my internal network with a few different servers attached (phone server, file server, email gateway appliance). And I have a SIP Trunk attached to the phone server on a separate phone system (4 handsets).

Which would you consider a better format? I really am playing around with it to see which works best for me.

Switching off NAT on my VDSL Router would it cause any issues with my services? Would I be better bridging the routers?

chevrolux

4962 posts

Uber Geek
+1 received by user: 2638
Inactive user

#1295623 2-May-2015 12:25

You could bridge the vdsl connection to pfsense and terminate it directly with a pppoe interface. Saves double nat and means you only have one router to worry about. But yes, you would then need a separate ATA for your VoIP account.

As for accessing the modem at the moment I think your issue will be the fact that pfsense adds a firewall rule by default to block private networks on the wan interface.

Zeon

3926 posts

Uber Geek
+1 received by user: 759

Trusted

#1295806 2-May-2015 17:18

You should definitely look at full bridge

Speedtest 2019-10-14

drmoorenz

11 posts

Geek

#1295818 2-May-2015 17:49

Ok thanks.