Internet Access from LAN issue

[StarsAndBars]

Good Day All!

I am making the switch from pfSense to Opnsense, but I am off to a rocky start with 24.1

I have a business-class cable modem connection with static IPs assigned to me. It is a /29, so I have 5 usable IPs. I know the connection between my location and the ISP is good, as I have another router assigned to one of the other static addresses in my block and it is working perfectly, as was this white box hardware (SuperMicro Xeon) when it was running pfSense. This SuperMicro board has 6 copper ports (Intel) and 2 SFP slots (ix0 and ix1).

At this moment, I can successfully reach the web interface of OpnSense on the LAN interface (ix0 with a copper transceiver). So the LAN side is configured correctly and working, allowing me to make changes, etc. The OPNSense unit itself can reach the internet for updates, etc., so I am thinking this is a NAT/Rules issue. I used the Wizard to set it up, so I thought it would automatically create the necessary configuration, but apparently it does not?

However, the WAN side is a completely different story. I have tried assigning the desired static IP address (68.188.10.xx) to both ix1 and igb1, as well as providing the correct gateway (68.188.10.xx) and cannot get out to the internet. I have physical connectivity as I see activity lights and I made sure I didn't have a bad cable, etc. This leads me to believe I obviously am missing something with my configuration. I provided valid public DNS servers to the wizard during setup, so I am fairly confident I have all my values correct.

Therefore, I can only conclude I have some sort of NAT or rule configuration I am missing or overlooking. I have installed other instances of opnsense with dynamic connections on other circuits and it worked just fine with no additional config necessary, so I have a feeling I am missing an additional setup setting for this particular setup with a static IP.

Could someone please offer some assistance as to what I might be missing or need to look further into? I'm stumped right now. THANKS IN ADVANCE!

[muchacha_grande]

Hi, I don't have your kind of Internet service, but I read in other threads in the past that you could use virtual IPs for your kind of setup https://docs.opnsense.org/manual/firewall_vip.html#other

Just take a look at the documentation.

Cheers

[Greg_E]

Can you ping an IP from the LAN, something like 9.9.9.9?

Do you have a local console set up (vga)? If so go to main menu at console and select ping to any website (name), if it works then you might be having a DNS.

I've found that in services --> unbound that I need to check the box to use the providers DNS because I don't cache all outside DNS locally.