Fresh Installation with static IP - No Ping and update

[BeTZe313]

Hello, i have a fresh install OPNSense installation. At first i want to update OPNSense and i get this error:

Fetching changelog information, please wait... fetch: https://pkg.opnsense.org/FreeBSD:14:amd64/25.1/sets/changelog.txz: Host does not resolve

When i ping from the OPNSense to 8.8.8.8 i get for example this message:

7 packets transmitted, 0 packets received, 100.0% packet loss

Ping to www.google.de have no message.

From my ISP i have a static IP4 address and i config the WAN Interface with this Static IP. My Gateway have the tham IP Address.

I search google about tips, but nothing solve my errors.

Can someone help me?

[cookiemonster]

Probably IPv6 getting in the way. Do you have ipv6 from your ISP? If not, you can disable it on the WAN. Do a health check too.

[Patrick M. Hausen]

The gateway must not have the same IP address but the one of the ISP router.

[BeTZe313]

@cookiemonster
I get no ipv6 and in WAN i have it disable (Option "none")

@M. Hausen
I have from my ISP an oneaccess one 420 router. I call with the ISP an get the information, that the oneaccess have no own IP Adress. Their is a cable from ISP in the oneaccess and from their a cable in ma OPNsense.

Which IP address i then use for the gateway?

[Patrick M. Hausen]

Your ISP needs to tell you. Or maybe they are using DHCP or PPPoE. Only they know.

[BeTZe313]

I phone right know with the ISP. The Oneaccess is like a can on a wall where i put in my cable from my router.
The oneaccess hast the static IP from my ISP in it. Their ist no DHCP or PPPoE Login.

I can ping the IP from my OPNsense to the oneaccess IP.

Edit:
I search now at google for OPNsense and oneaccess and found thomething about one-to-one nat. Could this be the solution?

[Patrick M. Hausen]

Then configure the Oneaccess IP as your default gateway and try again.

[BeTZe313]

This situation i have. I configure the Oneaccess IP as my default gateway.

With this i can not ping for example to 8.8.8.8 and the update of the OPNsense don't go.

if i have this config with the ip from the Oneaccess as gateway, must i create a new firewall rule?

[Patrick M. Hausen]

No. What netmask did you use with that static WAN IP? What *is* the static WAN IP?

Again: your ISP must know how you should configure your end device.

[BeTZe313]

I use in my lan 10.0.0.0-255. The static WAN IP is like 87.247.51.111

My ISP said, the Oneaccess is like a normal connection where i put a cable from the oneaccess to my router. And the router would be the OPNsense.

Edit:
Would be the problem, that my ip range complete different?

[Patrick M. Hausen]

What netmask goes with the 87.247.51.111 and what is the IP address of the Oneaccess gateway? All of this needs to match and then the Oneaccess must be configured as your upstream gateway.

You can pick your internal network as you like as long as it is from the RFC 1918 address range: 10.*, 172.16-172.31.*, 192.168.* ...

[BeTZe313]

I think I'm a little bit further along.

I phone with the ISP and get more information.

I have know the ip of the router.
The Network-Size is 87.247.51.109/29
The Subnet is 255.255.255.248
Ip of the Route is 87.247.51.110

I have also the DNS Server IPS

Know go to Interfaces->WAN and put the Router IP in the static ipv4 Field.
In the Gateway i put the same router IP in the static ipv4 Field.

Then i have no new effect. But when i go to Interfaces->WAN and choose at IPv4 gateway rules my Gateway then i can for example ping at 8.8.8.8

At the Stettings->General-> DNS i put the two DNS Server from my ISP and choose my Gateway at both.

Their is my next Problem. I can ping the DNS Server. But i can not ping for example at "www.google.com". Their come nothing.

When i want to check to update my OPNsense then i am at the Status Tab and right from the status Text i have rotating circle. When i click on the "Check for Updates" i come to the Update Tab and after a little bit oft time their comes the message, out of Time.

One Windows client say, their is no Connection to the Internet.

[Patrick M. Hausen]

Know go to Interfaces->WAN and put the Router IP in the static ipv4 Field.
In the Gateway i put the same router IP in the static ipv4 Field.

No.

Your network is (according to your ISP):

87.247.51.110

And the network size is:

/29

That means you can use the IP addresses:

87.247.51.105
87.247.51.106
87.247.51.107
87.247.51.108
87.247.51.109

for devices you want to connect.

They already suggested you use:

87.247.51.109/29

That means:

IPv4 static
Address: 87.247.51.109
Netmask/Prefix: /29

Gateway: 87.247.51.110

Add the correct DNS servers in the DNS settings and Internet will probably work.

[BeTZe313]

Ok, i have change to this config

Gateway    87.247.51.110
WAN        87.247.51.109

When i Save the WAN Config, then i have for 30-40 Seconds Internet on the OPNsense. In the Dashboard were shown Announcements and i can ping to 8.8.8.8 and www.google.com

But after the 30-40 seconds this is away. When i now save the WAN Config and apply, then is all their for the little time. The same when i reboot. After the start all is possible and then away.

The Windows Client shows, that internet ist avaible. But i can't open a website or can ping to something.

Do you have an idea, what can be the problem?

[meyergru]

It could be that you are leaking RFC1918 or other invalid addresses as source or destination and that your ISP does not like it and cuts off the connection. You could look at a tcpdump of your WAN connection to see if this is the case.