Unable to connect outside of LAN

[Triple_D839]

Xfinity Gateway
XFI ADVANCED GATEWAY (XB7)
Model Numbers: CGM4331COM and TG4482A
Friendly Model Name: XB7
Gb Ethernet Ports: 4
Dual-Band WiFi Option: Yes
2.4GHz Connected Client Limit: 75
5GHz Connected Client Limit: 75
Maximum Data Throughput: 2.5 Gbps
WPS (WiFi Protected Setup): Yes
Gateway / Network Management Tool (http://10.0.0.1): Yes
Two Total Telephone Ports: Yes (separate Alarm Port)
Battery Backup Capability (Xfinity Voice Only): Yes
Link Cordless Phones (CAT-iq 2.0*): Yes
Home Hotspot Capable: Yes


Firewalla Blue hard-wired to Gateway
Version 1.9742

Primary Network
IP = 10.0.0.59
Subnet Mask = 255.255.255.0
Gateway = 10.0.0.1
P DNS Server = 75.75.75.75
S DNS Server = 75.75.76.76
DHCP Address Pool = 10.0.0.51 - 251

Secondary Network
IP = 192.168.172.1
Subnet Mask = 255.255.255.0
DHCP Address Pool = 1992.168.172.51 - 251
P DNS Server = 75.75.75.75
S DNS Server = 75.75.76.76


TrueNAS hard-wired to Gateway
192.168.172.203

Wireless devices on network, all working.
- 6 smart TVs
- 8 Laptops
- 1 MIni PC
- 4 cell phones
- 3 iPads
- 2 Playstation 4s
- 1 Xbox 360

 

[NugentS]

So you gateway in TN should (from the looks of things) be 192.168.172.1
DNS Servers in TN should be 75.75.75.75 & 75.75.76.76

Just to confirm on the the Mini PC. If windows can you run "ipconfig /all" on the command line and post the result please. Or equivalent if it a different OS.

I am a little concerned about your "Primary Network" vs "Secondary Network"

 

[danb35]

TrueNAS hard-wired to Gateway

Which device is the "gateway" that TrueNAS is connected to? What device controls the "secondary network"? And why do you have two separate networks?

 

[NugentS]

@danb35 I was wondering that - especially as he seems to be using the secondary. I initially thought cgnat and it was referring to the external network but not with a DHCP Server

 

[danb35]

he seems to be using the secondary.

Well, maybe. I haven't seen any evidence that anything can communicate on 192.168.172.0/24. The Windows machine can't ping the gateway on that network. Neither can the NAS (I guess; the actual result of that hasn't been posted though). Nor can the Windows machine ping what's apparently the NAS, though where that IP comes from is anybody's guess. The Windows machine is wanting to go all IPv6, which is a completely different thing.

...and the more I look at this, the more questions I have. "Primary Network - IP: 10.0.0.59" What device has that IP address? And what's up with that very gimmicky-looking "Firewalla Blue"? It has one RJ45 port, one USB A port, one USB micro-B port (presumably power input), and a micro SD slot. If it's going to act as a firewall, that would seem to imply a router (but their docs say that isn't the case somehow), but how can it be a router with only one interface?

 

[NugentS]

1 + 1 != 2 in this case.
Its why I asked for the ipconfig from what I assumed was a windows PC - that I also assume works

 

[Triple_D839]

So you gateway in TN should (from the looks of things) be 192.168.172.1
DNS Servers in TN should be 75.75.75.75 & 75.75.76.76

Just to confirm on the the Mini PC. If windows can you run "ipconfig /all" on the command line and post the result please. Or equivalent if it a different OS.

I am a little concerned about your "Primary Network" vs "Secondary Network"

Sorry for delay in responce. Was out of town away from network.

 

[danb35]

Which machine is that from? Because it's showing addresses on 10.0.0.0/24, 192.168.250.0/24, and 192.168.122.0/24, but nothing on the network you're trying to assign to your NAS.

 

[NugentS]

@danb35 - I am confused as to whats going on.

@Triple_D839 can you run a traceroute (or is that tracert) from the PC to 8.8.8.8

There is something very wrong here

 

[Triple_D839]

Which machine is that from? Because it's showing addresses on 10.0.0.0/24, 192.168.250.0/24, and 192.168.122.0/24, but nothing on the network you're trying to assign to your NAS.

This is my mini pc, running CSI Linux for forensics

 

[Triple_D839]

@danb35 - I am confused as to whats going on.

@Triple_D839 can you run a traceroute (or is that tracert) from the PC to 8.8.8.8

There is something very wrong here

NugentS, here are the traceroute from my mini pc to 8.8.8.8

csi@csi:~$ traceroute 8.8.8.8
traceroute to 8.8.8.8 (8.8.8.8), 64 hops max
1 10.0.0.1 3.408ms 3.469ms 3.085ms
2 96.120.13.53 71.551ms 106.215ms 94.297ms
3 96.110.242.113 105.811ms 98.915ms 13.270ms
4 162.151.51.129 88.917ms 12.873ms 92.028ms
5 24.124.155.205 99.294ms 11.805ms 92.158ms
6 96.216.22.45 14.076ms 19.044ms 66.713ms
7 96.216.22.129 14.751ms 205.345ms 14.882ms
8 96.110.43.241 17.709ms * 26.433ms
9 96.110.38.114 12.497ms 13.110ms 79.961ms
10 23.30.207.162 297.160ms 109.707ms 136.526ms
11 108.170.252.193 68.207ms 13.670ms 15.927ms
12 142.251.61.179 22.263ms 252.827ms 12.031ms
13 8.8.8.8 298.361ms 95.750ms 205.501ms
csi@csi:~$

 

[NugentS]

The point being is that it goes to 10.0.0.1 first - is the only bit that matters
Do you have both wireless and wired attached?

 

[Triple_D839]

The point being is that it goes to 10.0.0.1 first - is the only bit that matters
Do you have both wireless and wired attached?

I have the XFinity Gateway, the NAS, and the Firewall are all on wire.
The mini pc, the laptop, and everything else is wireless.

 

[Triple_D839]

Sorry for delay in following up. Still no success. I plan to contact ISP tomorrow to see if I can gain access to the Gateway Control site. I am hopeful that from there I can direct the traffic and IP assignment better on my home network. Attached is my home network diagram. still missing a few IPs but they are for devices that are rarely online.