Separate firewall / pass-through on Power Hub

Hi,

I'd prefer to use my dedicated pfSense firewall with our Vodafone VDSL service / Power Hub router. Various reasons including site-to-site VPN for work and so on.

Clearly I could just configure the pfSense box as the router for devices on our network, keep the Power Hub as-is and effectively have a second router (pfSense + the Power Hub) but I wondered if there was a more elegant solution, which ideally might also remove the need for double-NAT from the public IP address (public IP -> Power Hub -> pfSense box -> private IP address) although double-NAT is manageable, just annoying.

I'm not sure how best to phrase this, but can the Power Hub offer some kind of "pass-through" of the public IP on to one of its rear-mounted sockets to the WAN side of my pfSense box sees a public IP as if there were only one router in the setup?

If it weren't for the need to keep voice service I'd move away from the Power Hub, but as it is....

Thanks

My Gigaclear router was put into 'Bridge mode' by Gigaclear. My Opnsense router now gets my public IP address assigned to its wan port. The change was made a few years ago.

I have done something similar with a Plusnet VDSL connection via an HG612 modem.

In reply to a post by steveharman:

but can the Power Hub offer some kind of "pass-through" of the public IP on to one of its rear-mounted sockets to the WAN side of my pfSense box sees a public IP as if there were only one router in the setup?

No. As with other major ISPs residential services their router doesn't have a bridge mode, and it couldn't easily if also providing a VoIP service in any case.

In reply to a post by tdw42:

As with other major ISPs residential services their router doesn't have a bridge mode, and it couldn't easily if also providing a VoIP service in any case.

I agree. But there may be an alternative depending on the internal architecture of the Powerhub, which is to use the pfSense as the router and connect a LAN port of the Powerhub to a LAN port on the pfSense, assuming that the VoIP adapter in the Powerhub is on the internal LAN bridge and accessible from a LAN port.

If that works, the Powerhub becomes an ATA. So it might just be better to get an ATA, if Vodafone digital voice is actually true VoIP and Vodafone will give users the VoIP logon details.