settings for WAN and Huawei LTE modem in bridge mode

[FredFresh]

Hi,

I want to use the huawei LTE modem in bridge and let the ponsense to manage everything.
I am missing the proper settings for the WAN port. The mobile connection uses the APN and username/password, how should I set the parameters of the wan interface?
Thank you

[doktornotor]

You need to add PPP interface, configure APN etc. there and assign that PPP interface to WAN.

https://docs.opnsense.org/manual/how-tos/cellular.html

[FredFresh]

Hi, thank you! I found that page, but stopped riding at the beginning because it seemed about the integrated mobile modem unit.

@doktornotor, I have the first issue: during the creation of the PPP connection, I have to input the link interface, but in my case the LTE modem is a standalone and connected by cable to the wan port.
It seems OPNSENSE doesn't offer the PPP on the list of connections inside the Interfaces menu.

[doktornotor]

Perhaps posting the exact model of your "LTE modem" would clarify what "bridge mode" means for that device. Sounds like a normal router with LTE WAN to me. Needs to take care of dialing whatever it's supposed to do itself. If you set your WAN to DHCP, you should get an IP and that's it.

The linked howto is of course not meant for this use case.

[FredFresh]

The modem is a huawei  B535-235a, with 5 lan port.
I am connected through cable to one of these ports.
The bridge mode is under the "router" menu...I think the modem functionality is still performed, but the OPNSENSE interface now see the public ip...correct? how should I proceed now?

Any other information you need, please let me know.

[doktornotor]

OPNSENSE interface now see the public ip...correct? how should I proceed now?

Hmmm? It's working, nothing more to do there...

[FredFresh]

Sorry, my mistake....the opnsense SHOULD see the public ip right? (didn't tried yet)...now the wan has a static ip4 ip, should i put PPPoE?

My problem is that I have 3 vpn of the same provide implemented and working with a fall-back logic.
The problem is that periodically the vpn are disconnected by "something" and only after restarting the modem, I can restore them.
After several tests My thought is that the issue is in the double NAT performed by the opnsense+modem.

[doktornotor]

Set your WAN to DHCP.

[FredFresh]

What I did:
Set wan interface to ip4 dhcp, no ip6 (this provider use ip4).
Ip4 conf type to dhcp, empty or blanck all the other options

Wan gateway is on wan interface, address family ip4, gateway minoring is disabled.

Removed the wan interface from the dhcp list.

The wan interface receive no ip.

[doktornotor]

I couldn't find any useful manual for mentioned device. If you mean this product then it does not have 5 but 4 LAN ports. And there's absolutely no mention of any bridge mode anywhere.

https://consumer.huawei.com/uk/support/wireless-routers/4g-router-3pro/

Perhaps post some screenshots of the GUI.

[FredFresh]

The manual refers to the first version of the firmware, the next one received the bridge option.
Huawei attention on this is zero.
Later I will post the screenshot.

[FredFresh]

Here the screenshot


In the meanwhile I also connected a laptop directly to the modem, and ipconfig return this

ip4 automatic configuration 169.254.168.52
subnet 255.255.0.0
gateway 192.168.8.1 (this is also the ip addresse of the modem after factory reset)

I have never seen the 169.254.168.52

[doktornotor]

Well that's APIPA. The bridge mode description from the screenshot is not really useful at all. Try DHCP and a different LAN port. No idea how's that designed to work.

http://consumer.huawei.com/en/community/

[FredFresh]

Thank you for your support, I will try to ask on huawei forum (hoping on other users because manufacturer's support is terrible).

[fbantgat7]

Sorry, my mistake....the opnsense SHOULD see the public ip right? (didn't tried yet)...now the wan has a static ip4 ip, should i put PPPoE?

Place the modem in fully bridged mode and configure the opnsense WAN interface with IPv4 PPPoE, adding your login credentials at the "PPPoE configuration" section of the WAN interface page.

My problem is that I have 3 vpn of the same provide implemented and working with a fall-back logic.

You will need to replicate this VPN configuration at the opnsense router.  A bridged modem device would perform no routing.  A double NAT configuration could break many services, not just VPN.