WAN settings for Belgian Edpnet ISP

Started by olivertorix, July 12, 2024, 09:21:39 PM

Previous topic - Next topic
July 12, 2024, 09:21:39 PM Last Edit: July 14, 2024, 01:50:31 PM by olivertorix
Hello all,

I am new to this site.
I just installed opnsense to replace my existing router and I'm trying to configure a ppoe connection on the wan port for EDPNET (Belgian ISP)
I found this post, but it is not working for me unfortunately and a url no longer works: https://forum.opnsense.org/index.php?topic=20181.0
According to the information provided by the ISP, it seems that the connection is made on vlan10.
How should the interfaces be configured in this case?
Should we create a new vlan interface and disable the default wan interface?

Can anyone help with setup?

Thanks in advance
Oli

Quote from: olivertorix on July 12, 2024, 09:21:39 PM

Should we create a new vlan interface and disable the default wan interface?


Leave your physical WAN interface enabled, but unnumbered (no ipv4/ipv6 config) and use that interface as parent for your VLAN10. After that you can configure PPPoE on top of the (new) VLAN10 interface.

You can find a howto at https://forum.opnsense.org/index.php?topic=21207.0 but be aware the screenshots are some OPNsense versions old, so be creative (will update the screenshots for 24.7 soon)

Perfect thank you,
This howto is very explicit, I will try this tomorrow.

Should we create a specific firewall rule for this vlan interface?

Quote from: olivertorix on July 12, 2024, 11:31:28 PM
This howto is very explicit, I will try this tomorrow.

A few relative easy steps, you just need to know (as always) where "to push". The important bit here is to understand the layered (like a cake) setup of (virtual) interfaces:

Physical NIC -> VLAN -> PPPoE

Quote
Should we create a specific firewall rule for this vlan interface?

Nope, your shiny new PPPoE interface will be just a "WAN" interface as usual. So it will be by default "protected" by the standard OPNsense policy, only if you want to allow inbound traffic from the Internet to your LAN you need to edit the rules, just like any other WAN interface.


I started with a default configuration and tried as indicated but it still doesn't work. The VDSL connection is however operational because when I connect the WAN cable to my old router the connection is established correctly.
The WAN interface is enabled without IPv4 or IPv6 configuration.
A VLAN10_WAN subinterface has been created of type ppoe with the ISP credentials.

Do you have any idea what may be wrong?

Quote from: olivertorix on July 14, 2024, 01:49:41 PM
The VDSL connection is however operational because when I connect the WAN cable to my old router the connection is established correctly.

That's not VDSL, that's plain ethernet, or does your "old router" providing PPPoE services (which is highly unlikely). So if you swap the cable and that connection does work you're 99,9% sure you didn't configure it correctly, because without a static or DHCP configured interface that shouldn't work (the interface should be configured for PPPoE, so IP assignment and routing is done over PPP).

Your second screenshot shows a VLAN10 interface that's up, but it's designated parent interface (WAN) is down. You're sure you didn't swapped interfaces ?



My router is a FRITZ!Box 7530 and my current subscription is VDSL2/annex B
Connection type : VDSL2 17a G.Vector (ITU G.993.5)

I don't think I swapped the interfaces. The ppoe is configured on the vlan interface which is itself a child of the WAN interface

hope this can help

Quote from: olivertorix on July 14, 2024, 08:51:36 PM
I don't think I swapped the interfaces. The ppoe is configured on the vlan interface which is itself a child of the WAN interface

Still the WAN interface on the screenshot shows down, so I don't understand what you're doing.

You can find the PPP logs at /var/log/ppps/latest.log to see whats happening...