Router – dd-wrt switch for PfSense

networkingpfsenserouterswitch

I currently have eth2 on my pfsense set up, and configured as 192.168.1.1, it has dhcp setup with allocation being 192.168.1.10 – 192.168.1.245.

On my dd-wrt box, i disabled the WAN, and set it to act as a port for the switch. I disabled dhcp, dnsmasq, spi firewall, Wlan0 and set a static IP for the router being 192.168.1.10

Pfsense is plugged into lan0 and pc plugged into lan1 (wan port is empty)

I have followed a few different guides, but i can't seem to get my router to act as a switch.

Anyone have success using DD-WRT as a switch while using pfsense as your dhcp/dns/gateway.

Any advice would help 🙂

Best Answer

First issue is that you're dd-wrt address is the first address of your DHCP scope. Any clients looking for DHCP assignment would probably get that address first. Change your dd-wrt switch ip to something below .10.

Also verify that Lan0 and Lan1 are in the same bridge group on DD-WRT. Easy way to test this is to set a static ip on the pc and see if you can ping .1 (pfsense).

If they can ping each-other then your dd-wrt(switch) should be working and your problem would be on the pfsense for not responding properly to DHCP.

Related Solutions

Router – Trouble setting up a DD-WRT router with a DSL gateway

You want to put the router between your gateway and the switch as mentioned. In this typical setup, all traffic between the internet and your local network runs through the router and gateway, which allows you to control the traffic using either device.

internets---------[gateway]---------[router]------[switch]---local network
              192.168.0.1 (lan)   192.168.1.253              192.168.1.XXX
              XXX.XXX.X.X (public)

Your second setup could allow all connections through the gateway, but this would mean that you would not be able to force control traffic from your router and your router would just be a DHCP server.

internets---------[gateway]---------[switch]------[router]
             192.168.1.254 (lan)       |       192.168.1.253
             XXX.XXX.X.XXX (public)    |
                                       +---local network
                                           192.168.1.XXX

There is a third possible setup and one that I actually use at my place. In this mode, the DSL modem only acts in a pass-thru/bridge manner (like a dumb modem). We use PPPoE for DSL connections and DD-WRT supports it. As a result of this setup, the Internet connection interface is actually on the router instead of the gateway, which allows further control over the traffic.

internets------bridge---------[router]---------[switch]---local network
               (modem)     192.168.1.254 (lan)              192.168.1.XXX
                           XXX.XXX.X.XXX (public ip)

SIP Traffic – Causes for Traffic Seen Going Into a Switch but Not Coming Out

I found the solution after spending roughly 40 hours on this problem.

There is a setting in the switch that enables "Auto DoS" protection. Apparently it considers TCP or UDP traffic that has matching source or destination ports to be a blat attack and drops the packet. This is ridiculously short-sighted since SIP traffic often (always?) relies on source and destination ports being 5060.

In case a textual description was insufficient:

enter image description here

Best Answer

Related Solutions

Router – Trouble setting up a DD-WRT router with a DSL gateway

SIP Traffic – Causes for Traffic Seen Going Into a Switch but Not Coming Out

Related Topic