FiOS + pfsense

A

AMD_RULES

2[H]4U
Joined
Mar 26, 2007
Messages
3,010
I have FiOS 50/20 internet at home right now. I'm using the provided router since it is required for run the DVRs in my home. I was wondering if it would somehow be possible to setup a pfsense firewall between the FiOS router and my switch... Is this possible? Reason for wanting to setup a linux firewall is to setup content filtering and to secure the network. Also setup some sort of VPN to my house.

The pfsense box wouldn't be doing DHCP since that would be handled by the FiOS router. Also I do not want to run a cat cable from the ONT or re-configure the FiOS router as a secondary router.

Thanks! Sorry for my networking ignorance :D
 
You should be able to disable any firewall features on your FIOS router, then just disable DHCP on you pfSense box and run it as a pure firewall. I don't see why there'd be any issues.
 
Jesse B said:
You should be able to disable any firewall features on your FIOS router, then just disable DHCP on you pfSense box and run it as a pure firewall. I don't see why there'd be any issues.
Click to expand...

Awesome! I'll have to try setting it up soon. Thanks!
 
This is the difficult way to do this....

Easy way:

connect pfsense WAN directly to the ONT. Connect the LAN of pfense to a switch. Connect the WAN of the fios router to the switch. Done.

You can take it one step further and put the fios router in bridge mode so that its not double NAT'd.

Yes the fios router has to be there in order for everything to work, but it doesnt have to be your edge device.
 
jadams said:
This is the difficult way to do this....

Easy way:

connect pfsense WAN directly to the ONT. Connect the LAN of pfense to a switch. Connect the WAN of the fios router to the switch. Done.

You can take it one step further and put the fios router in bridge mode so that its not double NAT'd.

Yes the fios router has to be there in order for everything to work, but it doesnt have to be your edge device.
Click to expand...

This is what I'm doing and it works well. I would recommend calling FiOS support and having the ONT provisioned to use ethernet rather then coax. It will make things a lot easier. The Actiontec router has a habit of loosing it's bridge configuration when it looses power. If you're doing strait ethernet there is no need for the Actiontec to work as a MoCA bridge. Just disable DHCP and keep it on your LAN so you get the guide data and VOD/PPV.
 
shabazkilla said:
This is what I'm doing and it works well. I would recommend calling FiOS support and having the ONT provisioned to use ethernet rather then coax. It will make things a lot easier. The Actiontec router has a habit of loosing it's bridge configuration when it looses power. If you're doing strait ethernet there is no need for the Actiontec to work as a MoCA bridge. Just disable DHCP and keep it on your LAN so you get the guide data and VOD/PPV.
Click to expand...

I forgot to add that part about calling VZ and switching the connection to ethernet.

FiOS is wonderful internet. Needs to have a good edge device.
 
Why does the router have to be there? IP is IP and standards should be standards.

If the router does something that no Open Source can replicate, I'd be much more worried to have it on my network.
 
TCM said:
Why does the router have to be there? IP is IP and standards should be standards.

If the router does something that no Open Source can replicate, I'd be much more worried to have it on my network.
Click to expand...

It manages the DVRs. People have this issue if they have TV service but not if they are only Internet.
 
If you are looking for content filtering, check out untangle. I'm a HUGE fan of pfsense as a firewall, but untangle is a true UTM and will fit your needs better.
 
jadams said:
This is the difficult way to do this....

Easy way:

connect pfsense WAN directly to the ONT. Connect the LAN of pfense to a switch. Connect the WAN of the fios router to the switch. Done.

You can take it one step further and put the fios router in bridge mode so that its not double NAT'd.

Yes the fios router has to be there in order for everything to work, but it doesnt have to be your edge device.
Click to expand...
Seems more difficult to have to call Verizon, have a cat6 wire ran between the router and ONT, and then reconfigure everything.

So you're saying I could have my own router/gateway, then just have the FiOS router attached to the LAN with DHCP disabled on it? Does that mean I still have to use the same IP address range?

ONT--->pfSense--->Switch---->FiOS Actiontec Router

I can do that?

shabazkilla said:
This is what I'm doing and it works well. I would recommend calling FiOS support and having the ONT provisioned to use ethernet rather then coax. It will make things a lot easier. The Actiontec router has a habit of loosing it's bridge configuration when it looses power. If you're doing strait ethernet there is no need for the Actiontec to work as a MoCA bridge. Just disable DHCP and keep it on your LAN so you get the guide data and VOD/PPV.
Click to expand...
Glad to hear some feedback on this... thanks!
Biznatch said:
If you are looking for content filtering, check out untangle. I'm a HUGE fan of pfsense as a firewall, but untangle is a true UTM and will fit your needs better.
Click to expand...

Only problem I have with Untangle is that to get the good features you have to pay a yearly fee, and it also requires much beefier hardware. I was just going to use an old desktop I have lying around.
 
AMD_RULES said:
And that will allow my TVs to function like they are now with the guide, on demand, and DVR functionality?
Click to expand...

That's how it was explained to me. We setup an office where the owner ordered a bundle wanting to watch TV in his office. We explained that there needed to be a Cisco Router as the default gateway and that's how the tech told us to do setup the network.
 
Hmmm.... maybe I'll give Verizon a call this week. Sounds very promising... I thought I was stuck with the FiOS router due to the TV
 
I wont answer you because you have FiOS and I do not and cannot get it. Oh well... mphhh
 
You must log in or register to reply here.
Back
Top