What's new

Is it possible to configure Router to forward/bridge client DHCP addresses to OpnSense firewall for packet inspection/evaluation?

  • SNBForums Code of Conduct

    SNBForums is a community for everyone, no matter what their level of experience.

    Please be tolerant and patient of others, especially newcomers. We are all here to share and learn!

    The rules are simple: Be patient, be nice, be helpful or be gone!

deveals

Occasional Visitor
Network fnfrastructure ...

OpnSense Firewall:
WAN: 11.11.11.11
LAN: 192.168.1.10

Router:
Asus ZenWiFI AX 6600
WAN: 192.168.1.11
LAN: 192.168.50.1

Network notes:
Cable modem to ISP)
Cable modem to Firewall (Opnsense) WAN
Firewall LAN to unmanaged switch
Router to LAN unmanaged switch
DHCP (provided by Router) clients addresses (192.168.50.x):
Most connect to Router via wireless
Some connect to Router via wired

Concern:
Firewall showing excess client outgoing packet uploads from router (screen shot of external firewall log attached). Router appears to mask clients (all source addresses are 192.168.1.11) versus DHCP assigned 192.168.50.x

Assistance requested:
Is it possible to configure Router to forward/bridge client DHCP addresses to OpnSense firewall for packet inspection?

Thanks. Danny
 

Attachments

  • Firewall (Opnsense) outgoing traffic - 16mar23.png
    Firewall (Opnsense) outgoing traffic - 16mar23.png
    147.9 KB · Views: 29
Concern:
Firewall showing excess client outgoing packet uploads from router (screen shot of external firewall log attached). Router appears to mask clients (all source addresses are 192.168.1.11) versus DHCP assigned 192.168.50.x
This is not a concern. It's the normal operation of the router being in "router mode". For most users the router's WAN interface is connected to a cable modem which only allows one device to be assigned an IP address. That's why the router's LAN is NATed to one WAN IP address.

If you want OpnSense to see individual client addresses you would need to disable the Asus' NAT function.
 
Hello and good day! Response appreciated and sorry for the delayed response, but now returning to this project. I decided to switch from OpnSense to pfSense and still learning the requirements and tools. However and after some reading, your suggestion to disable Asus NAT was on target and now able to identify which devices are busiest network traffic. Expertise and gudiance appreciated! Thanks. Danny.
 

Latest threads

Sign Up For SNBForums Daily Digest

Get an update of what's new every day delivered to your mailbox. Sign up here!
Top