Topics

1

23.7 Legacy Series / This close to giving up

« on: August 29, 2023, 09:01:49 pm »

Hi,


As you will see from my posting history, I have tried installing OPNsense a number of times.

I would post on this forum and usually be told that I am doing it wrong/lacking fundamental knowledge/whatever, would take that on board, and take it to the next level.

You can see my configuration from the previous posts.

Essentially a Linux box on a 192.168.178.xxx network, connected via a FRITZ!Box 7530 on 192.168.178.1.

Bought a dedicated host which usually sits at 192.168.10.1.

Found that the FRITZ!Box was not really playing ball, so bought a Draytek Vigor 130 modem and set up PPPoE via OPNsense.

Things were looking promising and I got a public IP address on the WAN interface.

Despite setting up a DHCP server on both interfaces, opening up my entire firewall, configuring DNS etc. -- nothing. Nothing whatsoever. I get no WAN traffic through.

I ordered a new modem, new cables, everything.

Maybe I am just not cut out for it. I thought I was decent with networking, but being unable to set this up when everyone just goes "you plug it and thar she blows LOL" is utterly defeating.

Anyone with any last-minute tips? I don't know if PFSENSE is somehow better -- I like open source. But it just Does. Not. Bloody. Work.

It's either that my set-up is somehow cursed or that I am too stupid.

2

23.7 Legacy Series / OPNsense not connecting to WAN

« on: August 16, 2023, 11:43:32 am »

Hello,


It's me again -- the guy who perennially and rather persistently is failing to install OPNsense on his home network.

I previously posted here a couple of days ago: https://forum.opnsense.org/index.php?topic=35368.0

As things stand, I have learnt some things, had some minor successes and insights, but sadly the end result is I am still unable to get my WAN connected via the OPNsense box·

Summary of what I have done in as few words as I can put it.


MY SET-UP
- My current ISP-issued router is the  FRITZ!Box 7530
- Its internal network is 192.168.178.x/24
- My OPNsense box is an AOPEN DE3250 mini PC (Intel N2930) with 2 x NICs
- All LAN traffic is routed through a Netgear GS234T smart switch


WHAT I HAVE DONE SINCE LAST TIME
- Reset the OPNsense box to default
- Configured interfaces, set LAN to 192.168.10.1
- Web interface working fine
- Then put FRITZ!Box in bridge mode ("Use FRITZ!Box as an IP client") and left it switched off for a second while I configured the WAN interface
- Set WAN to DHCP, leaving it on the 192.168.178.x/24 subnet, same as the FRITZ!Box
- Ensured that WAN was set up on OPNsense box for DHCP
- Plugged in FRITZ!Box directly into the OPNsense WAN port that I had configured at the beginning
- Reboot both devices
- OPNsense comes online, shows no IP address assigned to the FRITZ!Box (0.0.0.0/8)
- Try to play around with firewall rules, allowing all traffic to and from NAT
- Also previously already enabled my normal DHCP server (Pihole) and used OPNsense's
- Both tried to use my Pihole DNS and Unbound DNS
- Tried to configure some outbound NAT rules
- There was some talk about me being on double NAT, but it would appear that I am not; way I checked was by checking what the FRITZ!Box said was my public IP, comparing that to one of those "what's my IP?" sites, and doing a traceroute as well, but could not see any discrepancy there. If I did this wrong, let me know
- Loads of back-and-forth between the above options, endless tweaking, restarting, trying to use FRITZ!Box as normal router via OPNsense, trying to toy around with PPPoE and failing so miserably I nearly locked myself out of the FRITZ!Box etc.
- Here is the odd thing, though: When connected directly to the OPNsense box (not the web interface, but the CLI interface), I was briefly able to ping www.google.com, which tells me that there was some kind of WAN connection in place. I have not been able to replicate this
- I watched many videos and read guides, but ultimately, everyone's set-up is different or everything magically slots into place for everyone else

Any ideas at all? I won't give up until this is done.

3

23.7 Legacy Series / OPNsense via Fritzbox not allowing access to WAN/LAN

« on: August 12, 2023, 12:58:45 pm »

Hi there,


I have been trying to get OPNsense to work for a number of months now, with long breaks in-between.

The main thing I struggle with is to connect to the internet.

NOOB ALERT: I am relatively new to it all and whilst I understand some basic concepts of networking, there are some aspects that seem to elude me and leave me quite confused.


Here's what my set-up, what I am trying to do, and what goes wrong:

*MY SETUP*
- Current router is Fritz!Box 7530, which lives on 192.168.178.1/24 and acts as my gateway;
- OPNsense version is:
OPNsense 23.7-amd64
FreeBSD 13.2-RELEASE-p1
OpenSSL 1.1.1u 30 May 2023
- OPNsense is on a dedicated bare metal host with two NICs, and lives at 192.168.178.12
- Switch is at 192.168.178.11
- My pihole instance (bare metal) is at 192.168.178.101 and also acts as my DHCP server (at time of writing, I have turned this off)

*WHAT I AM TRYING TO DO*
- I am running a cable from LAN1 on the Fritz!Box to the NIC I have selected as my WAN interface in OPNsense when I installed it
- I am running a cable from the LAN port on my OPNsense box to my switch
- I put Fritz!Box in bridging mode, essentially demoting it to an IP device
- Despite restarting everything, I am unable to get access to the wider internet at all and cannot even ping the Fritz!Box at all -- ping to 192.168.178.1 returns nothing, and when I arp on my main machine running Fedora 38, I can see a device at 192.168.178.1 but without a MAC address, and no other new devices

*There are a couple of things I am confused by*

1. When I put my Fritz!Box in bridging mode, it asks me what the new gateway would be. What do I set there?
2. Should I configure separate static IPs for WAN and LAN interfaces on the OPNsense box? I have done this, assigning 192.168.178.12 for LAN and 192.168.178.13 for WAN and even 192.168.178.14 for Fritz!Box, but nothing. (Also at various points made sure DNS and DHCP was handled by the OPNsense box, and briefly opened up what I could on the firewall to eliminate that as a trouble source
3. Regarding subnets: the million dollar question for me is whether WAN and LAN devices should be on the same subnet? Initial subnet when configuring says to go to 192.168.1.1, which does not load up for me. With OPNsense installed, can I just set a new independent subnet?

I would be insanely grateful to anyone who can help me resolve this as I think I am just not getting it and slowly losing the will to do the same things over and over again that don't work... I have other stuff to be getting on with, haha...

PLEASE help or point me to documentation that's better than the "now draw the rest of the owl"-style official documentation.

Thank you!