I have today configured as per instructions by my isp my new assigned ipv4:
in the fritzbox I have enabled “PPPoE Passthrough”, in ipfire I changed the connection parameters from DHCP to static IP:
IP: 111.222.333.444
mask: 255.255.255.255
gateway: 100.xxx.yyy.zzz (this value I’ve copied from the previous configuration, where the ipfire used a ip provided by the isp.
Now, my problem is now, that my LAN is up and running, but I have no acces to the internet, although ipfire’s status page tells me, that it is connected nd the traffic figures change in the page’s header
Oh, I’m on core-update 202
Could one of you please help me out, I’ve surfed through various articles on different sites, but no progress so far. Reason, why I changed to a static ip is, that I want to have acces to my network from abroad via VPN, but can’z use DDNS since before I was connected vie CG-NAT
thx in advance, Christian
Hi,
If you run the ping command, for example, to ipfire.org, what results do you get?
I tried a ping to 1.1.1.1 with no result
Check your gateway address.
I’ve taken the gateway adress ipfire showed in the status page before I changed to ipfire to static.
Just a 2 minutes ago I changed back to dahcp on red since my personal government moans 
With this change back to dhcp on red ipfires ip changed to an ip in fereitz’ local 178. range (before the ipfire status page showed me my public static ip…)
But painfully, the problem remains unsolved
If your ISP has given you a static IP, it is likely that will be in a different subnet than the dhcp IP’s you used to get and therefore I would expect the gateway could also be different.
If the ISP didn’t specify the gateway IP it would be good to confirm it with them.
Hi,
thanks, I’ll check with them. Originally they just gave me an ip, the user and pwd I already had.
Where did you enter the credentials for your internet connection? Deactivate PPPoE Passthrough in the Fritzbox and enter the connection login data there provided by your ISP. And check the right IP range and subnets: 192.168.100.0/24 for your LAN, GREEN 192.168.100.1, RED 192.168.104.20, Fritzbox 192.168.104.1 for example.
What have I done:
as per documentation by the ISP ( Eigener Router mit Fritz Box only – fonira ) configure the box for access with a customer owned router behind it.
setup IpFire and changed network configuration on red from DHCP to static with the provider’s defined IPv4 (network mask 255.255.255.255 and gateway ip copy/pasted from the IpFire Status page as per before the changes.
This did not work.
Temporarily I changed IpFire’s red network configuration back to DHCP - got internet acces back, but:
IpFire’s status page shpws an ip in the Fritzbox range (192.168.178…), the hostname is now IpFire name in LAN (before it contained parts of the isp’s ip adress), the gateway is set to the FritzBox’ IP
My Network (IpFire):
green 192.168.5.1/24
blue 192.168.0.1/24
orange 192.168.150.1/24
The credentials I had already entered in IpFire’s Dial-in GUI Upss, I just realise that I don’t have the menu entry any more! Maybe because I had previously selected PPP instead of now DHCP?)
Hi Christian,
I think the important bit here is that Fonira expects the connection to be established using PPPoE, not by manually assigning the /32 address to RED.
So I would change RED to PPP/PPPoE using setup. That should also bring back System → Dialup, where you can enter the Fonira credentials.
If you have a separate ONT/modem, I would go one step further and connect IPFire directly to that, letting IPFire establish the PPPoE session itself:
Line-in/ONT/modem -> IPFire
instead of:
Line-in/ONT/modem -> Fritzbox -> IPFire.
That removes the Fritzbox completely.
If the Fritzbox is also acting as the DSL modem, then of course you would still need either the Fritzbox with PPPoE passthrough.
Cheers
A G.
Yap, the Fritzbox is acting as DSL modem…
I will give your advice a try this evening, thx
If your FRITZ!Box is a DSL modem it cannot assign IP addresses to IPFire as you wrote. So in modem mode it acts as a bridge and IPFire should establish the Internet connection. If in router mode the FRITZ!Box is responsible for login and passthrough must be turned off. In the first case IPFire gets the IP from your provider, in the other the FRITZ!Box
to what I csan see, the FritzBox has a DHCP Server running, I guess the 192.168.178.x adress for IPFire comes from there.
So, I thought, my first attempt was to use the FritzBox as you describe and have IPFire to establish the connection having a static IP adress.. Hmmm, somewhere I must have missed the path, dunno where.
Until today, the configuration with a DHCP adress obtained from the ISP for the FritzBox having IPFire to do the PPPoE Dialin worked.
To answer bonnietwin’s question regarding the Gateway IP I’m waiting for a response from the provider
If the FRITZ!Box actually received an IP address from the ISP, it would have to be acting as the router itself; in that case, an additional PPP dial-up connection by IPFire would normally not be possible or would at least be unusual.
Sorry, but this setup did work up to yesterday. I had IPFire do the dial in stuff and let the FritzBox in the middle. I could see the Gateway and IP adress on IPFire’s “Home” page. In my new scenario I want to use a static IP and thaught it need to be entered vie IPFire’s setup.
To be honest, I’m trying to muddle through with my limited knowledge and come to a solution that allows me to access my LAN from the WAN via VPN.
I configured my network as written above and let the FRITZ!Box do the dial-in. All machines (NICs) behind have a static IP address. For VPN I used OpenVPN on IPFire and the road warriors. To access the OpenVPN server of the IPFire I set up a port forward from the FRITZ!Box to the IPFire. Please refer to the documentation for further information. If you do not have a fixed external IP address consider using a dynamic DNS service.
Hmm, I will give it a try this night, thank you very much!
Good luck.
Well, I had a chat wih my provider and have now the following setup (in fact, as ist was before 
): the Fritzbox ist simply responsible for the physical ADSL connection with the PPPoE-Passthrough option checked. IPFire has PPP configuration on RED with credentials via GUI. Based on my user the IPS assigns a IP to my IPFire (in my case now a static IPv4 address). Accoording to the ISP, no Port forwarding is necessary since everything is passed through to my IPFire.. It was initially my fault to think, that I have to configure IPFire with the assigned static IP. So, sorry for the hassel…
In Fact, the connection is now up and running, but I still have no access neither via Wireguard nor OpenVPN - but I believe, that’s a different story.
Anyhow, thank you all very much for your help - the response and help in this forum is better than in one or the other ones 