Hi, I'using my Internet Box 2 in DMZ mode connected to my Opnsense VM, I would like to remove the Swisscom Router and change my WAN configuration on my Opnsense Firewall. I found these information: change IPv4 to DHCP go to Lease Requirements and put this string: dhcp-class-identifier "100008,0001,,opnsense" I tried also to configure vlan 10 but I think this is not my case because I'm not on FTTH. I also tried to put on my WAN interface the MAC address of my Internet Box. Someone can help me? With these configuration I'm not able to retrieve the IP. Thanks

Hi @"Gasebeitt77"#p758553 you indeed need to add the DHCP parameter in order to receive the IPv4 address from Swisscom, when using a non-official device, which is exactly what I do. I have a Zyxel G.Fast router which I only use as a bridge, and then terminate the IPv4 and IPv6 connections on an OPNsense box running on an PCengines APU2 box. This is the WAN interface configuration: [upl-image-preview liId=52190i4E5B97FF5E7C5651 alt=Screenshot 2023-04-01 at 17.20.59.png uuid=0b96d7ac-37cb-4e9d-8d34-783fcb9a645d] [upl-image-preview liId=52191i7BDFBEB6255876C0 alt=Screenshot 2023-04-01 at 17.21.13.png uuid=652898f2-3ceb-4a56-9cea-377a67bec01f] Apart from a few issues with IPv6, which I can discuss if you need, things have been working well for 2 years or so, with my Zyxel alone first, and the added OPNsense box later. Here I discussed the upgrade to the Zxyel router back in 2020: [https://community.swisscom.ch/t5/Router-Hardware/Report-on-good-VDSL2-experience-with-Zyxel-XMG3927-B50A/m-p/642747#M448](https://community.swisscom.ch/t5/Router-Hardware/Report-on-good-VDSL2-experience-with-Zyxel-XMG3927-B50A/m-p/642747#M448) Here I discussed the G.Fast upgrade to my line in 2022: [https://community.swisscom.ch/t5/Internet-general/Is-G-fast-or-VDSL2-profile-35b-turned-on-by-default-on-a-copper/m-p/695652](https://community.swisscom.ch/t5/Internet-general/Is-G-fast-or-VDSL2-profile-35b-turned-on-by-default-on-a-copper/m-p/695652) Hope this helps, let me know if I can help you in any other way! Bye, Luca

You don't have to do any of this. Just assign it a static IP address from the private range.

I would like to remove Swisscom Box and use my pfsense as router. Right now I have the configuration yo suggest.

It's a hassle, you need an DSL modem/router anyway. Why don't you just get Internet-Box 3?

I can do it with pfsense firewall router, I saw different articles but I'm not able to make it working. [https://www.swisscom.ch/en/residential/help/device/internet-router/external-router.html](https://www.swisscom.ch/en/residential/help/device/internet-router/external-router.html) I need to add to my wan network the scope option 60.

If your router is IB2 accessing internet over DSL, it's already configured there and you're getting the IP address on it. Then it forwards the traffic to the DMZ. You only need to do this if your router is directly connected to the Swisscom infrastructure.

Sorry we're speaking of two different things, here you can see another request like mine: [https://community.swisscom.ch/t5/Archiv-Internet/pfsense-amp-TP-Link-MC220L-DHCP-works-but-no-internet/td-p/548478](https://community.swisscom.ch/t5/Archiv-Internet/pfsense-amp-TP-Link-MC220L-DHCP-works-but-no-internet/td-p/548478)

That applies to the the setup where the modem/router (TP-Link) is in bridge mode. From what I understood you are on DSL. In your specific case you would need a router that can be put in bridge mode. You can't do that with IB2, hence the DMZ method you're using. This is more like port forwarding than a regular DMZ where each device in the DMZ gets a public IP address.

The TP-Link MC220L is a media converter and not a bridge modem from what I see... If I would like to test another modem/router that permit bridge mode, is there any special recommendation or any generic modem/router can work?

Any would do, but I would go for one that supports G.fast.

> Hi > > thanks for the info! I'll do as suggested! > > do you use Swisscom tv with this configuration? Could you also share your configuration? > > thanks

Opnsense PFSense - Option 60 Internet connection

bitracer

I wouldn't do double NAT either.

« Page précédente