Best way access isp router from my internal network?

I have an isp router connected to my openWRT router in the wan port using PPoE as interface protocol of the WAN interface.

I can connect a cable to the router in other of its lan ports and access it through IP 192.168.1.1

But that requires to unplug my computer from the openwrt router and phisically reconnect it to the ISP router.

I woul like to access the web interface of the ISP router from my local lan, preferibly using a local ip (such as 10.100.100.254).

I have tried to assing my openWRT router a sencond ip address (10.100.100.254) and use redirections to redirect traffic from 10.100.100.254 to the wan interface an 192.168.1.1, with no success.

How can this be done.
I am not sure if it can be done, as wan interface is using PPPoE and not plain tcp/ip.

I have no spare port in my openWRT router, so I cannot use another port ton connect both routers.

First you need to know if the ISP box responds to IP on the port that is also used for pppoe and at what IP. Often it is 192.168.100.1.

Then assign an IP directly to the physical port in OpenWrt. The device listed must be the Ethernet port, not the pppoe tunnel (which is called @wan in UCI and pppoe-wan in the kernel). The port you want is used as the Device in the wan section. For DSA routers it is almost always wan. On an x86 or Pi etc with direct ports it may be eth0.

config interface 'wan_ip'
   option device 'wan'
   option proto 'static'
   option ipaddr '192.168.100.2/24'

Place wan_ip into the wan firewall zone.
Specifying ipaddr with a netmask automatically installs a route for it, there is no need to add a route separately.
From the router you should be able to ping 192.168.100.1. From a LAN computer you should be able to go to the modem's web page. Since wan_ip is in the wan firewall zone, it will be NATd and the modem will see you as 192.168.100.2.

2 Likes

Thank you a lot.

I have created the isplan interface with static address 192.168.1.2/24 (my isp router is 192.168.1.1.)

From my openwrt router I tested connection via ping 192.168.1.1 and it works
and curl http://192.168.1.1 provides the web page of the router.

So connection is working from the router.

What do you mean by placing isplan in the wan firewall zone?
Add it as covered network besides wan, wand and isplan?

I have tried but it does not work

OK, I have found the problem.

The problem was that in my system lan does not redirect traffic to wan directly, as I am using a VPN.

So I have taken isplan out from the wan zone and created a isplan zone with masquarading active and the isplan interface in it and aceppting redirections from lan.

Now it works correctly.

Thank you for the help.