upstream wan webinterface not reachable from lan network

[ckruijntjens]

Hi All,

I have a question. I have a upstream wan configured in opnsense. This is a fritzbox. I cant not connect to the webinterface from the lan. I can ping the upstream wan(fritzbox) fine.

What am i missing here?

[ckruijntjens]

Anyone that can help me?

My lan ip on opnsense is 192.168.2.4
Ip on router isp is 192.168.1.3

I can not connect to the webui from my lan side 192.168.2 range

[Taunt9930]

This should help

https://homenetworkguy.com/how-to/access-your-modem-web-interface-with-opnsense/

[ckruijntjens]

Hi Thanks for your reply @Taunt9930.

on my opnsense i have configure the following.

lan interface 192.168.2.4
wan interface 192.168.1.2
modem ip (upstream for opnsense) 192.168.1.3

So the wan nic and modem is in the same subnet. Is this a problem?
When i connect to openvpn my modem is reachable. directly from the lan not? has this something to do that i am using opnsense in kvm machine maybe? nat is working perfectly.
should i change the wan interface ip address range? because i have the lan to any rule active.

Thanks for your help.

[EdwinKM]

Another useful guides
https://homenetworkguy.com/how-to/use-opnsense-router-behind-another-router/
https://homenetworkguy.com/how-to/use-static-routing-to-second-opnsense-router-with-nat-disabled-for-homelab/

[ckruijntjens]

strange,

whatever i do i can not seem to get it to work. followed all tutorials but can not reach the webinterface of the modem.

When i connect my phone (openvpn) i can access everything. modem webgui and lan.

what could be the issue?

[ckruijntjens]

How can i troubleshoot his.

I followed multiple guides with outbound nat and all. But i can not seem to get it working?

[Taunt9930]

What subnet is your device on when you connect via OpenVPN? Does it end up on the same subnet as the modem? The only thing I can think of, is there is an obscure setting somewhere in your modem UI that blocks connections from different subnets - I had that on my N300 VOIP phone - it took ages to work it out! Certainly, if you cannot see anything in your firewall logs blocking the connection, it MUST be the modem itself actively refusing the connection.

[lilsense]

How can i troubleshoot his.

I followed multiple guides with outbound nat and all. But i can not seem to get it working?

If it is too complicated, just disconnect the router and connect your PC to the Fritz box and do whatever configuration you want to do... To be honest this is very simple to follow and you might have missed something int the steps.

[ckruijntjens]

Hi,

No when i connect true openvpn i am on a different subnet. but then it works.

and if i am on my lan network i cant connect to it.The modem is not rejecting anything, because when i take opnsense out of it i can connect yust fine.

[Bittabola]

My network uses the same subnet as the modem and I still can't reach modem GUI. Any ideas what I should do?