Behind the FRITZ!box Settings

Started by reddington, September 13, 2023, 10:01:24 PM

Previous topic - Next topic
Have a nice day dear community :)

I'm facing a problem that I can't seem to solve.

Here are my settings

Fritzbox: 192.168.178.1
OPNSense WAN: 192.168.178.3
OPNSense LAN: 192.168.178.4
WAN Gateway OPNSense: 192.168.178.1
LAN Gateway OPNSense: 192.168.178.3
DNS server OPNSense: 192.168.178.1

Cable goes from the OPNSense WAN port into VLAN2 where the cable from the Fritzbox also hangs inside (Mngt Switch)
Cable from the OPNSense LAN goes into VLAN1 where the rest of the network is located.

IPv4 routes are created on the Fritzbox at 192.168.178.3

I can successfully ping 1.1.1.1 and 8.8.8.8 via OPNSense.

With my PC 192.168.178.XX in VLAN 1 I can also ping my other devices, but I have no access to the Fritzbox or the Internet.

I hope you can help me

I don't know what type of internet access the fritz!box has, but can't you configure it to act as a pure modem or in bridge mode? That would greatly simplify your setup, then the opnsense is the one receiving the public IP from the ISP and you don't have double NAT and all the problems this will be causing you down the road...

Example of bridge mode config for Fritz!Box

Quote from: reddington on September 13, 2023, 10:01:24 PM

Fritzbox: 192.168.178.1
OPNSense WAN: 192.168.178.3
OPNSense LAN: 192.168.178.4


Looks like you have the same subnet on the lan and wan side. This can cause a lot of trouble if not coinfigured correctly.

Please set the lan side to  192.168.179.1/24 for example.
i want all services to run with wirespeed and therefore run this dedicated hardware configuration:

AMD Ryzen 7 9700x
ASUS Pro B650M-CT-CSM
64GB DDR5 ECC (2x KSM56E46BD8KM-32HA)
Intel XL710-BM1
Intel i350-T4
2x SSD with ZFS mirror
PiKVM for remote maintenance

private user, no business use

We do not know the subnet sizes, do we? ;D

Quote from: weeßicknich on September 14, 2023, 04:55:07 PM
We do not know the subnet sizes, do we? ;D

we dont. But the default fritzbox subnet is: 192.168.178.1/24
i want all services to run with wirespeed and therefore run this dedicated hardware configuration:

AMD Ryzen 7 9700x
ASUS Pro B650M-CT-CSM
64GB DDR5 ECC (2x KSM56E46BD8KM-32HA)
Intel XL710-BM1
Intel i350-T4
2x SSD with ZFS mirror
PiKVM for remote maintenance

private user, no business use

Whatever the mask it is, you are right.
I oughtta get my eyes checked since I totally read those third octets as being different. They are indeed the same. Ouch.  ::)

I works, I have changed the Lan IP


Gesendet von iPhone mit Tapatalk

September 15, 2023, 10:30:23 AM #7 Last Edit: September 15, 2023, 10:40:33 AM by uli
Quote from: seed on September 14, 2023, 10:04:39 AM

Please set the lan side to  192.168.179.1/24 for example.


I would avoid using this address.
The Fritzbox uses 192.168.179.1/24 for the guest-network.

The default address 192.168.178.1/24 for the Fritzbox is changeable if you don't like it. But the address for the guest-network is not changeable.