This topic

pfSense

McFarTech — Sun, 11 Jun 2023 22:33:01 GMT

Hi.

Hope someone might be able to help with some info. Right now i am with Virgin Media and use the Super Hub in modem mode connected to my pfSense machine.

I am looking to move to BT Full Fibre 900 and continue to use pfSense as my Firewall \ Router. Doers any one have any suggestion or real world info / setup using BT in this configuration?

Thanks in advance

Re: pfSense

Crimliar — Sun, 11 Jun 2023 22:51:32 GMT

Your basic setup is an absolute doddle! Connecting the pFsense box directly to the ONT all you need is:

PPPoE username: bthomehub@btbroadband.com

PPPoE password: BT

No VLAN required on the pFsense Wan port, but you'll not be able to use BT's "digital voice" unless you figure out how it works and set up the appropriate rules on the pFsense - apparently no one has managed this yet.

Yes, you could always "double NAT" (no UN/Pass on pF that way), but if I were using a pFsense box, it's not something I'd want to do!

Re: pfSense

McFarTech — Mon, 12 Jun 2023 10:45:47 GMT

Thanks mate for the info much appreciated. Yeah i am not bothered about digital voice.

Re: pfSense

brookheather — Mon, 12 Jun 2023 19:51:35 GMT

Some more settings you will probably need to set for BT:

System->Routing->Gateways change the Monitoring IP to something like 1.1.1.1 as the BT gateway IP doesn't respond to pings.

For IPv6 go to Interfaces->WAN

IPv6 Configuration Type DHCP6

Enable Request a IPv6 prefix/information through the IPv4 connectivity link

Enable Only request an IPv6 prefix, do not request an IPv6 address

DHCPv6 Prefix Delegation size 56

You can also set the MTU to 1500 as BT supports baby jumbo frames.

Re: pfSense

fusrohdan — Wed, 27 Sep 2023 12:31:44 GMT

Hi, I have those exact settings you listed there applied to my pfsense wan adapter, but I do not get ipv6 connectivity. What else is needed please?

Re: pfSense

rusty79675 — Tue, 10 Oct 2023 13:55:42 GMT

Did you finally sort it out - I have been trying for ages to get mine to work and finally had a break through today, let me know if you need some help.

Re: pfSense

mikemod — Thu, 26 Oct 2023 10:36:08 GMT

I have been trying to get IPV6 working as well on BT FTTP using pfSense.

I can get a WAN_DHCP6 link local address in the form fe80::225....... but still no IPV6 connection to the outside world.

I would be interested in what you did to get it working

Re: pfSense

mikemod — Thu, 26 Oct 2023 10:52:17 GMT

In the LAN settings I added "track interface" in the IPv6 configuration

and in the Track IPv6 settings set IPv6 Interface - WAN and Prefix ID 56

I now have a LAN interface IPV6 of 2a00:23c7......... and my PC had been allocated a similar IPv6 address

However IPv6 tests on the internet still detect no IPv6 address.

Re: pfSense

mikemod — Thu, 26 Oct 2023 10:51:52 GMT

Forgot to set the LAN default rule to IPv4+IPv6

All working now 🙂

Re: pfSense

rusty79675 — Thu, 26 Oct 2023 11:12:55 GMT

I have just jumped to OPNsense following the news from Netgate - it is a similar setup but if anyone needs help just let me know. If I get some time i may make a post on how to set it up from scratch.

Re: pfSense

mikemod — Thu, 26 Oct 2023 13:50:35 GMT

Yea, I saw that this morning and looks like I will follow you.

I haven't got too complicated a setup just a few VLANs, Wireguard VPN and using pfBlockerNG.

Did it take much effort to move ?

Re: pfSense

rusty79675 — Thu, 26 Oct 2023 17:59:52 GMT

It took a few hours - I have three VLANS, and it was quite simple once you learn where everything is.

Instead of using unbound and setting it up similarly to PFBlockerNG, I installed Ad-Guard home which works really well and has a more user-friendly interface IMHO. Additionally, I like the fact that I can use a mobile app to check on what is being blocked and you can unblock it very easily.

I used some of the information from here to install Ad-Guard home as it is a community-built plugin

https://0x2142.com/how-to-set-up-adguard-on-opnsense/

Re: pfSense

mikemod — Fri, 27 Oct 2023 08:31:51 GMT

Thanks, will give that a go at the weekend, maybe not a good idea today as my wife is working from home 🙂