Double NAT - Provider Modem

[ruggerio]

Hello,

I have a DOCSIS-Cablemodem, which was in bridged mode. Unfortunately, i had lots of packet losses in the last time. So i had to switch to router mode. The opnsense (where all traffic flows on it) is in dmz (i have mail- and webserver from the outside)

Since i changed the way, i get max 100mbps passing via opnsense. Before, it was up to 700 mbps without any problem. I think now, this is a problem of natting opnsense and the modem.

Easy, i disabled natting on the sense, nothing more worked. Of course, as the sense with nat got the ip from the isp-router, without natting all clients behind the sense come now up with their own ip instead of the natted from the wan-port of the sense.

I'm a little bit out of ideas. Does anybody have a "similar" installation? How did you solve this for you?

Thanks!

[Patrick M. Hausen]

Can't you configure a static route on your provider router? That's what i do here with my "Fritzbox" router. If the answer is yes, you can disable NAT on the sense.

[ruggerio]

Short answer is no - have to switch to bridged mode , thats the one with packet loss.

[Gauss23]

Short answer is no - have to switch to bridged mode , thats the one with packet loss.

So, what’s your point? Pmhausen had the best idea to get rid of the second nat level. Configure a static route on the isp router. What brand/model is it? It should be possible.

Otherwise you’ll need another router.

Maybe your OPNsense hardware is limiting the bandwidth? What features do you have enabled? IPS/IDS?
In bridge mode it is capable to deliver the full bandwidth?