OPNsense Forum

Archive => 20.7 Legacy Series => Topic started by: ruggerio on January 14, 2021, 09:29:06 AM

Title: Double NAT - Provider Modem
Post by: ruggerio on January 14, 2021, 09:29:06 AM
Hello,

I have a DOCSIS-Cablemodem, which was in bridged mode. Unfortunately, i had lots of packet losses in the last time. So i had to switch to router mode. The opnsense (where all traffic flows on it) is in dmz (i have mail- and webserver from the outside)

Since i changed the way, i get max 100mbps passing via opnsense. Before, it was up to 700 mbps without any problem. I think now, this is a problem of natting opnsense and the modem.

Easy, i disabled natting on the sense, nothing more worked. Of course, as the sense with nat got the ip from the isp-router, without natting all clients behind the sense come now up with their own ip instead of the natted from the wan-port of the sense.

I'm a little bit out of ideas. Does anybody have a "similar" installation? How did you solve this for you?

Thanks!
Title: Re: Double NAT - Provider Modem
Post by: Patrick M. Hausen on January 14, 2021, 10:09:32 AM
Can't you configure a static route on your provider router? That's what i do here with my "Fritzbox" router. If the answer is yes, you can disable NAT on the sense.
Title: Re: Double NAT - Provider Modem
Post by: ruggerio on January 14, 2021, 10:28:01 AM
Short answer is no - have to switch to bridged mode :) , thats the one with packet loss.
Title: Re: Double NAT - Provider Modem
Post by: Gauss23 on January 17, 2021, 12:30:41 PM
Quote from: ruggerio on January 14, 2021, 10:28:01 AM
Short answer is no - have to switch to bridged mode :) , thats the one with packet loss.

So, what's your point? Pmhausen had the best idea to get rid of the second nat level. Configure a static route on the isp router. What brand/model is it? It should be possible.

Otherwise you'll need another router.

Maybe your OPNsense hardware is limiting the bandwidth? What features do you have enabled? IPS/IDS?
In bridge mode it is capable to deliver the full bandwidth?