OPNsense Forum
English Forums => General Discussion => Topic started by: wickeren on July 17, 2019, 11:19:51 pm
-
My fiber provider in Holland (KPN) offered me a free upgrade from 100Mb to 200Mb, but told me I need to switch from PPPoE to IPoE.
Current situation: WAN is PPPoE, getting first IP automatically from my /29 subnet from provider, and configured the remaining IPs as an alias, working perfectly fine. LAN is on 192.168.1.0/24.
As I was unfamiliar with IPoE I started looking around and read everywhere I should just change the WAN type to DHCP and asked KPN for confirmation for that.
To my surprise they told me it was quite different and gave me a example config for Cisco looking quite strange to me. This was the only example they could provide. The Cisco config they gave me seem to tell to configure the WAN on a static IP in a different /30 subnet (calling it a “interlink subnet”) with a gateway in that same subnet and configure my current /29 subnet on the LAN side…
!## Guide, instelling IPOE met Cisco Router.
!## Poortype kan afwijken
!-------
!------- WAN poort ----
!------- interface GigabitEthernet0/0/0 description Connection to WAN ip address 145.54.111.62 255.255.255.252 speed 100 duplex FULL MTU 1500
!
!
!
!-------
!------- LAN ------
!-------
! interface GigabitEthernet0/0/1 description to Customer LAN ip address 31.149.115.137 255.255.255.248
!
!
! ip route 0.0.0.0 0.0.0.0 145.54.111.61
!
That looks ridiculous to me, as I don’t want my public IPs on the LAN! And I also don’t want to buy a another router to put in front of OPNsense so I could use my public IPs on my OPNsense WAN.
Any idea how to configure this right on the OPNsense WAN interface? Could I probably just use the /30 subnet as suggested as primary and configure the /29 as aliases on the WAN also?
Anyone familiar with IPoE in general and/or KPN setup in particular?
Regards,
Julian
-
Really nobody with a similar setup?
-
Hi Julian ,
Although I don't have a similar setup, I expect that their intend is just to offer the 31.149.115.137/29 to a separate network, so the customer can install his/her own firewall behind the Cisco they usually deliver.
If you would like to configure a dmz and offer the remaining 31.149.115.137/29 addresses to machines behind your router/firewall, you could probably just configure the block on a separate interface, using an alias on wan shouldn't be an issue as well if you just want to port forward addresses within the network range.
The Cisco config they send you only configures a static address on wan, with a default gateway to 145.54.111.61, then they add the network you can use on another interface (which they call LAN).
As far as I know, IPoE is just a marketing term for standard IP over Ethernet, which sometimes seems to come with specific dhcp options (like SkyUK for example https://wiki.opnsense.org/manual/how-tos/SkyUK.html (https://wiki.opnsense.org/manual/how-tos/SkyUK.html))
Best regards,
Ad