Messages

1

24.7 Production Series / 5G Modem as WAN connection, NAT issues..

« on: October 03, 2024, 11:05:07 pm »

Could really use some help here, I'm a practiced amateur but I'm more screwed up that I can currently figure out.

Diagram of what I've got goin on here: https://imgur.com/a/VL9c5yQ

"Net A" - My cell provider only provides private IPs. If I bypass the "Net A" OPNsense box and go straight from client to 5G modem, the client either gets an IP (10.x.x.x) from my provider, if modem DHCP off, or one from the modem (192.168.254.x) if DHCP is on. The client then has internet access with no problems.

The modem is currently in Wireless Broadband mode vs Bridge mode. I'm not clear what Wireless Broadband mode is. I have tried it in Bridge previously with no improvement. There is essentially no decent manual available for the 5G modem that I can find.

If I plug the OPNSense box into the 5G modem, it'll get a WAN IP from the modem (or my provider, depending on DHCP) but seems to lose the IP frequently if I refresh the connections Overview page in OPNsense.

Clients get their IP's from OPNSense DHCP, on a different subnet from anything else in the chain. 192.168.1.x, generally.

In this configuration, I have no access to the internet from clients. I can ping 8.8.8.8 from a client but it returns errors from Gateway at 192.168.1.1 and then every 3-5 failed pings, returns a ping from 8.8.8.8.

In order to mostly eliminate the chance of any weird settings I've made in the last couple years running this firewall, I have reset all settings to defaults, hasn't helped.

Eventual plan is the VPN from Net A to Net B.. but should probably focus on getting Net A to work first.

thanks.

2

24.1 Legacy Series / Force WAN renew from Windows box via Telnet/SSH

« on: March 19, 2024, 06:52:18 pm »

I've got a remote site that I'm at fairly often that has no internet. In order to have internet on the network, I USB tether my phone to the WAN port of my OPNSense system, then have to login to the Webui and force a WAN renew.

While working at the site, I frequently have to disconnect my phone and go do tasks.. so every time I come back, its reconnecting, going to the WebUI and renewing.

I can see on the monitor port that OPNSense knows Ive reconnected.. but it won't automatically renew the connection for an IP. I've tried to find a method of doing this, including asking here earlier, and made no headway.

So I have a second idea:

I'd like to create a user on OPNSense that hopefully only has access via telnet/ssh and only to a limited command set.. ideally whatever the CLI command is to renew IP's.

Then on my windows box I'd like to create a script that with a single click on the desktop, will login to that account via telnet/ssh, run the WAN renew command, then exit.

Is this possible? If not, any other suggestions?

thanks.

3

22.7 Legacy Series / [deleted]

« on: March 23, 2023, 07:00:29 pm »

[deleted]