Guest User!

You are not Sophos Staff.

Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 5 replies
  • Subscribers 29 subscribers
  • Views 15936 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Assistance with getting WAN to work with Netgear CG3000v2 in Bridge Mode

Will Parker

Hi all, I'm new, have a basic knowledge of the things Im trying to achieve and despite extensive searching I'm coming up with blanks to get what should be a simple configuration working.

Basically I'm an Australian Optusnet Cable customer (yay, lucky me) and I would desperately like to see if bridging the modem I have, the Netgear Genie CG3000v2 (firmware V2.08.07) to the WAN port of my Sophos and then link my 24 port Netgear Gigabit switch to the LAN port for basic networking to the house and home office.

I have got the Sophos XG115 from my business partner and it is fully registered with Sophos and I've basically set it back to pretty basic config (though not having ever seen one from scratch I'm not too sure and it's not like you can just paper clip these guys right :P)

I've got all the firewall rules turned off as a precaution.

From what I've read there are two things I need to know to work with this Modem/Router in bridge mode.

1) Optusnet allocates it's clients' IPs via MAC address on modem so the best way to bridge the connection is to spoof the MAC on the new router.

2) Optusnet then provisions a DHCP WAN address and there is no need for any authentication or credentials.

The best and most encouraging thread I found was at whirlpool:

forums.whirlpool.net.au/.../2179609

 

Sounded simple enough.

So I went into the Netgear Genie Cable/Modem and took note of it's MAC address and the external IP I get (which has stuck around for a very long time now) and then switched it to bridge mode.

This means that the only way I can access the web front end of the Netgear is to connect directly to Port 1 on the LAN and hit 192.168.100.1 for admin purposes.

Only Port 1 on the Netgear will be working and wifi will be down so it should then just be a dumb modem pushing from the RG6 to Port 1 LAN.

So I put a Cat 6 patch from the Netgear Port 1 to the Port 2 WAN on the Sophos and patch the Port 1 LAN port on the Sophos to the main switch of my network.

My Sophos is available to configure on https://192.168.0.2:4444 and the Netgear was originally the default gateway at 192.168.0.1.

I started turning on DHCP and so forth but ended up abandoning all that while I tried to get the internet to work.

 

Something I read was that you needed to turn the new router off and back on to allow it to reconfigure itself to the new provisioning via DHCP (and I did this because it didn't work just plugging it all in and saving a new setup on the Sophos, or after rebooting the Sophos via the web admin).  This too did not work.

 

So I tried various things adding and removing and recreating the gateways and dipping into the routing areas, zones and such but in the end nothing got me anywhere.

I find that I can ping the Sophos, connect to it and so on but in this configuration I never get internet.

What could I be doing wrong.

I'll try to add some pics to help convey what my setup looks like...

TIA Will



This thread was automatically locked due to age.
  • 0

    Hi Will,

     

    Configure your Modem/router to allow the LAN IP 192.168.0.0 /24 network to the internet, (probably you need to configure NAT, policies etc.) to that modem.

     

    I think you got the setup of your XG correctly, give it a shot. Let us know how it goes.

     

    Regards,

    Rap 

  • 0

    My suggestion would be to NOT try to spoof the MAC of the gateway (cable modem).  Putting a gateway in Bridge Mode isn't true transparent pass-through. 

    So, remove any MAC spoofing config you have on XG and reset both.  That should work.

  • 0

    Hello,

     

    I am on Telstra cable with a similar Netgear modem.

     

    I do not know why you are confusing your configuration or trying to clone MAC addresses.

     

    All you need to do is configure your modem in bridge mode, plug in your Sophos WAN port into port 1 on the netgear, set the WAN interface on the sophos to Ethernet DHCP.

     

    There is no need to mess with any mac clone or anything.

     

    We have 3 people with telstra cable working fine with the netgear in bridge mode.

     

    If you really can't get it to work, take it out of bridge, change the netgear ip to something like 192.192.192.1 and set your WAN port to 192.192.192.192.2, on the netgear set a DMZ/port forward rule to forward to 192.192.192.2 and disable wireless on the netgear. and your done :)

  • 0 in reply to StealthyM

    Thanks guys,

     

    The MAC spoofing came from a suggestion in a troubleshooting thread on whirlpool and made no difference to my problem as it happens.

    I'm really not sure what is going on here.  The modem is rubbish my service from optus is very inconsistent and I'm  not convinced that the modem isn't part of the problem as things certainly improve for a time when it is power cycled.

    I don't know why it won't get a dhcp on the wan port when the modem is in bridge.  I'll have a play with the dmz theory when I get a chance.

    I appreciate the suggestions - thank  you.

    Will