When configuring an Inseego FX-4100 with a static public IP in bridge (pass-through) mode, you may notice that inbound traffic is still blocked. Unlike most devices, the FX-4100 continues enforcing firewall rules even when bridged.
If you need to manage or monitor a downstream device (e.g., ping it from the WAN), you must manually adjust the firewall settings.
Steps:
- Access the device in bridge mode
- Assign your computer a static IP in the
192.168.1.0/24subnet - Use
192.168.1.1as the gateway - Connect directly to the FX-4100 LAN port
- Assign your computer a static IP in the
- Log in to the web interface
- Open a browser and go to
http://192.168.1.1
- Open a browser and go to
- Modify firewall settings
- Navigate to LAN IF → Firewall
- Enable: “Allow the router to respond to ICMP pings from the WAN”
This change allows inbound ICMP traffic and restores basic reachability for monitoring and management.
Note: On the Inseego FX-4100, the setting “Allow the router to respond to ICMP pings from the WAN” may affect more than just ICMP. In some firmware versions, enabling this option appears to relax WAN-side filtering behavior in bridge (pass-through) mode, which can allow additional inbound traffic (such as HTTPS) to reach the downstream device.
Because this behavior is not clearly documented (at least in the document I received) and may vary by model, firmware or carrier configuration, it’s recommended to test connectivity after applying the change to confirm the expected results.