[SOLVED] DHCP-WAN=internet OK and STATIC-WAN=no internet

[gruutch1]

Hello!

Iam a newbie with OpnSense. My Firewall experience was as yet with Ipcop. It is a linux based firewall.

Today I installed OpnSense 16.7-amd64 with two network cards (WAN and LAN).

This is my test environment:
Provider (Fritzbox/Gateway) -------WAN-OpnSense-LAN--------CLIENTS

The IPs are:
Fritzbox  (Gateway)  = 192.168.1.1 (Static)
WAN OpnSense        = 192.168.1.11 (DHCP from Fritzbox)
LAN OpnSense          = 192.168.0.1 (Static)
Clients get IPs from DHCP-range 192.168.0.10 < 192.168.0.250

After this installation, I can go the internet. Perfect!
But if I change the WAN-OpnSense IP from DHCP to static (in 192.168.1.250), then I have no Internet.

I think I must entry the DNS and Gateway IP manually. But I see so many settings and I couldn´t find the settings for this two IPs. I was unsure and I tried something, but it didn´t worked.

Could you tell me please, where I type the rest settings exactly in OpnSense?

[bartjsmit]

Some things to consider:

- the default gateway is at IPv4 upstream gateway on the WAN page. Test your connection independently from DNS by pinging 8.8.8.8.

- The Fritzbox needs to know where your internal LAN is. That means that you need to add a static route for 192.168.0.0/24 to go via your OPNsense WAN interface.

- The OPNsense WAN interface blocks private networks (RFC1918) by default.

- Inbound connections are firewalled twice; on the Fritzbox and on OPNsense.

- You may be able to set your Fritzbox in bridged mode and make the PPPoE connection from OPNsense.

Bart...

[gruutch1]

Hello Bartjsmit,

thank you for your answer.
But in my imagination it is illogical, why I should change my fritzbox static route and / or set to bridging-mode.
I say that, because back then I used the linux-firewall ipcop. And there I didin´t changed the fritzbox settings.
At ipcop I installed two networkcards too and setting up the same settings like in opnsense and it did worked.

gruuch

[wurmloch]

Hi gruutch,

I understood that you are talking about outgoing traffic, ie open Google with a browser.

So, for a static config you have to enter gateway and dns manually (booth the LAN IP of your Fritzbox). Have a look at the wizzard somewhere in the menus. I think this will lead you through the complete setup.

Hope this helps
Uwe

[gruutch1]

Hello wurmloch, hello bartjsmit

ok I started the wizard again. And suddenly it works.
I suppose, that my gateway settings, which I made yesterday was wrong.
But now it works.

Thanks to both of you for your help!

gruutch