Pfsense - access Draytek Vigor 130 GUI

Jon20 · 17 Nov 2019 at 15:30

I'd like to be able to access the GUI of the Draytek Vigor 130 I'm using. I've tried to follow this guide:https://webcache.googleusercontent....+&cd=6&hl=en&ct=clnk&gl=uk&client=firefox-b-d, but I'm getting stuck where it's saying "add a new interface using the same physical interface that your WAN connection uses". If I do that, there's just a message about 2 interfaces on 1 and then doesn't allow me to.

WAN is on igb0
LAN is on igb1
MODEMACCESS (OPT1) is on igb2

If I try to assign MODEMACCESS to igb0, that's when it comes up with:

The following input errors were detected:

Port igb0 was assigned to 2 interfaces: WAN (WAN) MODEMACCESS (OPT1)

From other guides, they all seem to show the WAN interface as PPPoE, where as mine is DHCP (Sky broadband). Not sure if that is significant or not.

sideways14a · 17 Nov 2019 at 15:48

I had this as well, you need to set up the modem interface as a PPPoE link instead of what you have at the moment.
Its not very well described and i dont have my VM with pfsense working at the moment as i am soon to move the server its on (when i can be arsed running wiring!)

Jon20 · 17 Nov 2019 at 16:45

sideways14a said:
I had this as well, you need to set up the modem interface as a PPPoE link instead of what you have at the moment.
Its not very well described and i dont have my VM with pfsense working at the moment as i am soon to move the server its on (when i can be arsed running wiring!)

Is it "MODEMACCESS igb2" that I need to make PPPoE?

sideways14a · 17 Nov 2019 at 18:28

Just create a ppoe link afresh using one of your nics ports, its in the vlans menus somewhere (like i said i aint got mine on at the moment so trying to remember this from a hazy memory)
You will need to go into the dray and set it to ppoe ect but thats well documented on the web.

Your sky broadband router is then tossed as it serves no use, i assume they gave you the password for your connection - i left vodaphone in a huff because they wouldnt.../ would.../ wouldnt... / would ... give me mine.

Rabtech · 17 Nov 2019 at 22:16

I'm on plusnet with a pfsense router and a Draytek 130 - by accessing the Draytek GUI you can do the SNR tweak for more speed

1. Create an interface on em0 (or whatever lan interface your Draytek 130 is on) named modemaccess, give it a static ip of 192.168.2.2.
2. Change outbound NAT mode to hybrid and create a new outbound rule.
3. Set the Interface in the rule to modemaccess
4. Set the source in the rule to the same subnet as your primary lan subnet (192.168.0.0/24 in my case)
5. Set the destination to 192.168.2.0/24
6. Set the Translation address to 'Interface Address' and save

Test and it should work fine.

Jon20 · 18 Nov 2019 at 11:26

Rabtech said:
I'm on plusnet with a pfsense router and a Draytek 130 - by accessing the Draytek GUI you can do the SNR tweak for more speed

1. Create an interface on em0 (or whatever lan interface your Draytek 130 is on) named modemaccess, give it a static ip of 192.168.2.2.
2. Change outbound NAT mode to hybrid and create a new outbound rule.
3. Set the Interface in the rule to modemaccess
4. Set the source in the rule to the same subnet as your primary lan subnet (192.168.0.0/24 in my case)
5. Set the destination to 192.168.2.0/24
6. Set the Translation address to 'Interface Address' and save

Test and it should work fine.

Thanks. I’m probably being dumb but, how do I create another interface on an existing one? The rest of it I can do no problem. Annoying thing is, I’m sure I’ve done this before but just can’t remember how I did it lol

enigma27 · 18 Nov 2019 at 23:17

Jon20 said:
Thanks. I’m probably being dumb but, how do I create another interface on an existing one? The rest of it I can do no problem. Annoying thing is, I’m sure I’ve done this before but just can’t remember how I did it lol

I have the same issue as you.. have had similar set-up for 2 years and could never get access to my modem to work with Pfsense

When i go into assignments the only option I have is to assign unused interfaces. I cant use the same network port to anything other than Wan or Lan

Caged · 18 Nov 2019 at 23:22

Do you have a spare physical interface on your pfSense box, and a managed switch? If your connection doesn't use PPPoE then that's the only way I can think of to get this working.

What would fix all this instantly would be if DrayTek had an option to run the management on a VLAN tag.

enigma27 · 18 Nov 2019 at 23:27

I only have 2 nic ports on mine one assigned to LAN and one assigned to WAN

because SKY uses MER for authentication you have to set the set-up as DHCP and not PPPOE

Jon20 · 18 Nov 2019 at 23:54

Caged said:
Do you have a spare physical interface on your pfSense box, and a managed switch? If your connection doesn't use PPPoE then that's the only way I can think of to get this working.

What would fix all this instantly would be if DrayTek had an option to run the management on a VLAN tag.

I’ve got another 4 physical interfaces/ports I can use but I don’t have a managed switch. A user on Reddit has suggested I do it using a VLAN: https://www.reddit.com/r/PFSENSE/co...urce=share&utm_medium=ios_app&utm_name=iossmf

Guessing that does need a managed switch then?

Rabtech · 19 Nov 2019 at 11:15

Jon20 said:
Thanks. I’m probably being dumb but, how do I create another interface on an existing one? The rest of it I can do no problem. Annoying thing is, I’m sure I’ve done this before but just can’t remember how I did it lol

Apologies I missed that you were using DHCP on the WAN instead of PPPoE, have you just tried the NAT rule pointing to the WAN interface igb0 instead without creating another interface? This assumes you are double nat'ing and your WAN address is 192.168.2.x?

Jon20 · 19 Nov 2019 at 13:07

Rabtech said:
Apologies I missed that you were using DHCP on the WAN instead of PPPoE, have you just tried the NAT rule pointing to the WAN interface igb0 instead without creating another interface? This assumes you are double nat'ing and your WAN address is 192.168.2.x?

No problem, I think the ISP I was using when I did this last time was using PPPoE. I don't think I'm double NAT'ing. Setup is Vigor 130 > Pfsense > TP-Link Gb POE switch > Clients. I've tried the suggestion from the user on Reddit but can't get it working. I don't know if that's because I don't have a switch that does VLANs. I notice there's an option for VLANs in Pfsense but I don't know how to set that up or if it's the right way to do it.

andy_mk3 · 19 Nov 2019 at 13:14

@Jon20 I think I replied to your post on reddit with some screenshots of my setup, were they any use?

Jon20 · 19 Nov 2019 at 13:22

andy_mk3 said:
@Jon20 I think I replied to your post on reddit with some screenshots of my setup, were they any use?

Ah Andy, I knew I'd seen the username before

I've just copied your settings from the screenshots but unfortunately, still can't access the GUI. I notice you have a managed switch, was just wondering if that's required?

andy_mk3 · 20 Nov 2019 at 10:08

Jon20 said:
Ah Andy, I knew I'd seen the username before I've just copied your settings from the screenshots but unfortunately, still can't access the GUI. I notice you have a managed switch, was just wondering if that's required?

I'm pretty sure it is required yes. I certainly could not make it work without vlans. I think I have the modem port untagged vlan2, and the pfsense wan port tagged vlan2 (HP switch). Its quite handy as my modem is under the stairs and the pfsense box in another room, so a single cable can handle wan and lan connections.