Skip to main content

How to access Movistar/O2 HGU GUI from pfSense

Introduction

Beginning with the following topology:

image.png

With the Movistar HGU router configured in "semi-bridge" mode (bridge mode for the purposes of this article), we want to access its 192.168.1.1 management IP (WEB GUI) from the 192.168.2.0 LAN.

Configuration

We need to add a physical connection between the pfSense router and the HGU router and configure outbound NAT on that new interface as follows:

image.png

First of all, define a new gateway on the pfSense GUI and assign it the mgmt. IP address of the HGU router.

image.png

Next, we need to configure the physical interface where this new cable is connected to the HGU:

image.png

The parameters to be configured are:

  • IPv4 Configuration Type: Static IPv4
  • IPv4 Address: any address not used in the HGU LAN
  • IPv4 Upstream gateway: the gateway created in the previous step

And last but not least... the outbound NAT

Outbound NAT, also known as Source NAT, controls how pfSense software will translate the source address and ports of traffic leaving an interface.

This will translate traffic coming from the pfSense LAN on the 192.168.2.0/24 network to the IP on the 192.168.1.0/24 HGU LAN configured on the associated interface (overloading 192.168.1.2). The configuration for the NAT mapping is as follows:

Go to Firewall > NAT > Outbound and create a mapping clicking in the following dropdowns, with these parameters:

image.png

The image is self-explanatory.

We can see the NAT translations table at Diagnostics > States and filtering by the overloaded IP address of the interface (192.168.1.2):

image.png


Sources:

Network Address Translation — Outbound NAT | pfSense Documentation
https://docs.netgate.com/pfsense/en/latest/nat/outbound.html

¿Internet y IPTV por router propio y VoIP por router de Movistar?
https://bandaancha.eu/foros/internet-iptv-router-propio-voip-router-1746237

3 formas de cambiar el router de operadora por un neutro
https://bandaancha.eu/articulos/poner-router-neutro-cascada-bridge-9909

Poner el HGU Smart Wifi en modo bridge para conectar tu router neutro a la fibra Movistar
https://bandaancha.eu/foros/poner-router-hgu-fibra-movistar-modo-1742687