Re: PfSense + ubiquity

Top Page
Attachments:
Message as email
+ (text/plain)
+ (text/html)
+ (text/plain)
Delete this message
Reply to this message
Author: Donald Mac McCarthy via PLUG-discuss
Date:  
To: Main PLUG discussion list, Michael Butash via PLUG-discuss
CC: Donald Mac McCarthy, Seabass
Subject: Re: PfSense + ubiquity
Will Cox allow for a bridge/virtual bridge mode? Xfinity does, which
allows you to put in a firewall, and use the modem only as a gateway,
therefore preventing a double NAT situation. Never lived in a Cox area
before, and currently ride CL fiber.

Mac

Michael Butash via PLUG-discuss wrote on 5/3/20 2:00 PM:
> Cox modems will learn and allow only 1 mac at a time (unless business
> is set to allow more, but not on residential).  If switching out
> firewalls, I 99% of time reboot the modem first and foremost.
>
> -mb
>
> On Sun, May 3, 2020 at 12:08 PM Snyder, Alexander J via PLUG-discuss
> <
> <mailto:plug-discuss@lists.phxlinux.org>> wrote:
>
>     I got it working. 

>
>     I assigned the SFP+ port as my LAN and assigned it the 10.x.x.x/16
>     network. Then I had to call COX and list the WAN Mac address with
>     them. Upon doing so I was able to reach external sites, and all
>     downstream devices started coming alive!

>
>     Thanks for all the suggestions and help!

>
>     Thanks,
>     Alexander

>
>     Sent from my Galaxy S10+

>
>     On Sun, May 3, 2020, 03:14 Herminio Hernandez, Jr. via
>     PLUG-discuss <
>     <mailto:plug-discuss@lists.phxlinux.org>> wrote:

>
>         Can you  login to the FW via the LAN interface? Can you  ping
>         the FW LAN interface? Check the routing and NAT policy on the
>         FW. All outbound traffic should NAT to the FW WAN interface
>         and there should be a default (0.0.0.0/0 <http://0.0.0.0/0>)
>         route to the internet.

>
>         On Sat, May 2, 2020 at 7:27 PM Seabass via PLUG-discuss
>         <
>         <mailto:plug-discuss@lists.phxlinux.org>> wrote:

>
>             I'm with Mac, I think it is not the firewall, but if you
>             have the ability to plug it into a display with a
>             keyboard, you can use that for configuration and modify a
>             different device at the same time.

>
>             Makes it easier to troubleshoot by giving you the ability
>             to configure your pfSense ports at the same time.

>>
>>
>>             Message: 2
>>             Date: Sat, 2 May 2020 09:04:35 -0700
>>             From: Donald Mac McCarthy <
>>             <mailto:mac@oscontext.com>>
>>             To: "Snyder, Alexander J via PLUG-discuss"
>>             <
>>             <mailto:plug-discuss@lists.phxlinux.org>>
>>             Subject: Re: pfSense + Ubiquity
>>             Message-ID:
>>             <
>>             <mailto:18adfa38-3e72-7b0a-e31a-1ddf175d717f@oscontext.com>>
>>             Content-Type: text/plain; charset="utf-8"

>>
>>             I can help - but I am unavailable to do so until tomorrow.

>>
>>             Make sure there are not any thing other than default
>>             VLANs on the
>>             interfaces to start with. Ubiquiti is famous for not
>>             havinght eSFP+
>>             ports active in the default configuration, and I believe
>>             the switch has
>>             all the ports to shutdown on default config as well.

>>
>>             I think it is the switch not passing traffic through - no
>>             the firewall.

>>
>>             Mac
>>             Snyder, Alexander J via PLUG-discuss wrote on 5/2/20 8:53 AM:
>>             > Does anyone out there have experience with pfSence and
>>             Ubiquity switches?
>>             >
>>             > I have zero with either but that didn't stop me from
>>             buying both ....
>>             > how hard could it be?! LOL.

>>             >
>>             > I bought a Negate XG-1537-1U. I bought a Unifi Pro 24
>>             PoE switch.

>>             >
>>             > I can configure the FW immediately after
>>             > firstboot/restore-default-configs, but only if i set
>>             the LAN interface
>>             > to be the cable that goes directly to my laptop. That's
>>             great, but
>>             > that does shit for the downstream switch.

>>             >
>>             > I have a 10GB SFP+ Port that I want to configure as the
>>             downstream
>>             > port to ubiquity, but any configuration other than
>>             mentioned above
>>             > fails .... and I'm now on my 12th "Reset To Factory
>>             Defaults" ... any
>>             > help on this would be greatly appreciated!

>>             >
>>             > Thanks,
>>             > Alexander

>>             >
>>             > Sent from my Galaxy S10+

>>             >

>>             >
>>             > ---------------------------------------------------
>>             > PLUG-discuss mailing list -
>>             
>>             <mailto:PLUG-discuss@lists.phxlinux.org>
>>             > To subscribe, unsubscribe, or to change your mail settings:
>>             > https://lists.phxlinux.org/mailman/listinfo/plug-discuss

>>
>>             --
>>             Donald "Mac" McCarthy
>>             Director, Field Operations
>>             Open Source Context
>>             +1.602.584.4445
>>              <mailto:mac@oscontext.com>
>>             https://oscontext.com
>>             -------------- next part --------------
>>             An HTML attachment was scrubbed...
>>             URL:
>>             <http://lists.phxlinux.org/pipermail/plug-discuss/attachments/20200502/aeab14b4/attachment-0001.html>

>>
>>             ------------------------------

>>
>>             Subject: Digest Footer

>>
>>             _______________________________________________
>>             PLUG-discuss mailing list -
>>             
>>             <mailto:PLUG-discuss@lists.phxlinux.org>
>>             To subscribe, unsubscribe, or to change your mail settings:
>>             https://lists.phxlinux.org/mailman/listinfo/plug-discuss

>>
>>
>>             ------------------------------

>>
>>             End of PLUG-discuss Digest, Vol 179, Issue 2
>>             ********************************************

>
>
>             ---------------------------------------------------
>             PLUG-discuss mailing list -
>             
>             <mailto:PLUG-discuss@lists.phxlinux.org>
>             To subscribe, unsubscribe, or to change your mail settings:
>             https://lists.phxlinux.org/mailman/listinfo/plug-discuss

>
>         ---------------------------------------------------
>         PLUG-discuss mailing list - 
>         <mailto:PLUG-discuss@lists.phxlinux.org>
>         To subscribe, unsubscribe, or to change your mail settings:
>         https://lists.phxlinux.org/mailman/listinfo/plug-discuss

>
>     ---------------------------------------------------
>     PLUG-discuss mailing list - 
>     <mailto:PLUG-discuss@lists.phxlinux.org>
>     To subscribe, unsubscribe, or to change your mail settings:
>     https://lists.phxlinux.org/mailman/listinfo/plug-discuss

>
>
>
> ---------------------------------------------------
> PLUG-discuss mailing list -
> To subscribe, unsubscribe, or to change your mail settings:
> https://lists.phxlinux.org/mailman/listinfo/plug-discuss


--
Donald "Mac" McCarthy
Director, Field Operations
Open Source Context
+1.602.584.4445

https://oscontext.com
---------------------------------------------------
PLUG-discuss mailing list -
To subscribe, unsubscribe, or to change your mail settings:
https://lists.phxlinux.org/mailman/listinfo/plug-discuss