Questions tagged [pfsense]

pfSense is a free, open source customized distribution of FreeBSD tailored for use as a firewall and router. In addition to being a powerful, flexible firewalling and routing platform, it includes a long list of related features and a package system allowing further expandability without adding bloat and potential security vulnerabilities to the base distribution.

Filter by
Sorted by
Tagged with
0
votes
0answers
9 views

Is that possible to create site to site VPN between 2 sites by using a pfsense virtual machine installed in Vmware workstation? [duplicate]

I need to connect 3 sites (Site A,B and C)+ AWS Cloud together over a site to site VPN. Each site should have a VPN tunnel to the cloud Each site should have a VPN tunnel to the other sites ...
1
vote
2answers
59 views

Virtualize pfSense on VMware

I'm making a network model and I have issues with virtualization of pfSense under VMware. I have a client in a VLAN 220 (172.2.20.100/23) trying to ping his gateway (pfSense : 172.2.20.1/23) but it ...
0
votes
0answers
66 views

4 ssids with 4 public IP addresses on pfsense

I have a requirement for 4 WiFi SSIDs, each with a separate public IP. As I need some sort of firewall I was thinking to get a pfsense Netgate SG-3100 that would have its WAN port connected to the ...
0
votes
0answers
44 views

pfsense in multi-WAN: OpenVPN route all traffic through VPN, how to set the gateway?

I have an OpenVPN running on pfSense in a CARP with multi-WAN. OpenVPN listens on all incomming (0.0.0.0) so that I can enter throu what ever WAN is active right now should one go down. When I ...
0
votes
1answer
60 views

Site-to-site IPsec and rerouting to another IPsec tunnel

We have three different geo sites (SITE1, SITE2 and SITE3) and each site has PFSense firewall installed. Sites have been connected together with IPSec tunnels. Also Site2 is connected to customer ...
0
votes
0answers
18 views

pfsense CARP with VLANs duplicate default route

I have set up a 2pf CARP with VLANs. So far everything works well however I wonder why and if it is a problem that I get on the VLANs a duplicate default route. My DHCP on the VLANs is of course set ...
3
votes
1answer
61 views

pfsense DHCP lease remember time settings?

pfSense remembers DHCP leases for a quite long time, which is good use on a LAN where the same machines request IP numbers frequently and have a chance to always get the same leases. However on an ...
2
votes
2answers
143 views

No route to host for IPs in same subnet being routed by bgp

I have set up BGP to do some custom routing for a subset of addresses in the range 192.168.1.0/24. I have verified that the BGP is working by testing ping/curl on a different host in a different ...
1
vote
2answers
85 views

How does pfSense control network traffic when plugged into a switch?

I apologize for this n00b question, but I'm trying to learn networking to help at a non-profit where the old IT guy is no longer there. They have several Cisco switches and one pfSense instance that ...
1
vote
0answers
41 views

pfSense - VPN access to the printer only

in my small company I have a LAN network connected to the outside world via pfSense based router. On this router we have OpenVPN configured for employees. In this network we have printer and several ...
0
votes
0answers
458 views

pfSense: Route traffic from LAN to OpenVPN client

I have set up OpenVPN on pfSense, and it works almost the way I want it. The client connects to the pfSense box from the WAN, is assigned a tunnel IP and can communicate with all the networks on the ...
0
votes
1answer
59 views

How to setup OpenVPN to PFsense? [closed]

How to setup OpenVPN to PFsense? My OpenVPN server used Angristan Openvpn-install, so I need to add there 3 lines to Advanced Configuration -> Custom options tls-client tls-version-min 1.2 tls-...
1
vote
0answers
49 views

Using IPv6 6in4 tunnel with multiple VLANs, or LAN Interfaces?

I have a pfSense router, and I've setup a Hurricane 6in4 IPv6 tunnel by following this guide: http://thirdinternet.com/wp-content/uploads/2017/11/Configure-6in4-Tunnel-in-pfSense.pdf It all seems to ...
0
votes
1answer
495 views

Pfsense - blocking a ping immediately

I am having a issue with pfsense... I have a rule that block ping (echo requests) from the LAN network interface to a openvpn client interface (OVP1), the rule is working fine blocking the ping to ...
0
votes
1answer
35 views

Leased 1GB fibre firewall with multiple IP LANS & tenants [closed]

I’m in desperate need of some unbiased advice and suggestions. Everyone I ask seems to want to sell me a £2-5,000 firewall appliance and £1500+ per year of support/licencing. I have a 1gb leased ...
4
votes
1answer
515 views

What does 'parent interface' mean with respect to VLANs?

I'm trying to learn about VLANs by configuring a router with PFsense installed. Reading the documentation I came across the following sentence: The following example shows how to configure two ...
1
vote
1answer
76 views

What does “delta” stand for in arpwatch?

I've just set up Arpwatch on my pfSense machine and started getting emails about flip flops in my network. As the network is quite big, I understand that the flip flops indicate that a certain IP-...
3
votes
2answers
1k views

Why would pfSense ignore arp requests?

I'm configuring pfSense 2.4.3p1 as a transparent firewall. It's running in virtual machine with two vtnet paravirtualized adapters: WAN (vtnet0) connected to a 'far-side' network containing the ...
1
vote
0answers
366 views

pfsense Server Load-balancing on LAN Interface [closed]

I am trying to load balance a couple of web servers from the LAN side as I don't need access from the WAN so that clients on the LAN can access these web servers: LAN IP is 192.168.10.1 I created a ...
3
votes
3answers
2k views

Block communication between hosts in the same VLAN

I've a pfsense firewall with a managed switch, and i created a VLAN: all works fine, but what i want to do is to block the communication between the hosts in my VLAN. For example, i want that an host ...
2
votes
1answer
831 views

Configuring the NAT 1:1 rules with pfsense

I have two pfsense. One pfsense is on 192.168.0.1 and another pfsense is on 192.168.20.1. Basically I have installed 20.1 pfsense on one machine 192.168.0.180 which is in the network of 0.1 pfsense, ...
1
vote
1answer
291 views

Pfsense CARP mutliwan

I'm currently trying to build a HA setup using Pfsense/CARP for the first time but i have a few questions about it. On the LAN side i have 3 VLAN's and they failover fine using CARP, the problem is ...
1
vote
2answers
60 views

Setting up a hypervisor network

I have a pfsense appliance that serves as my router. I have four hypervisors that I want to hook up to one of the router interfaces through a switch. The hypervisors will house multiple VMs that are "...
2
votes
1answer
1k views

Can I bulk export aliases from pfSense (in order to import to another pfSense)?

This seems like a simple thing but there doesn't appear to be an easy way (in the GUI). Before I dive into the file system level, I thought I'd ask --- is there an easy export of aliases from pfSense? ...
3
votes
1answer
96 views

How to connect servers from different Datacentres via firewall

really need help since I am still new in firewall. I have 2 firewall located in two separate Datacentres. I need to make a connection for the servers from these 2 DCs. One firewall is running pfsense ...
1
vote
0answers
559 views

Configure pfSense VLAN Trunk

I have setup a pfSense box as a transparent firewall between my Cisco router and first Cisco switch: CISCO ROUTER - 10.10.1.253 ↓ PFSENSE - OPT1 BRIDGE - 10.10.1.252 ↓ CISCO CORE SWITCH - 10.10.1.250 ...
0
votes
2answers
186 views

Ping traverses openvpn tunnel only 1 of 2 times [closed]

I can barely put into words the problem I'm having, but I'll give it a go. I have a pfsense router on which I've set up openvpn to act as a client to connect into another network. This has worked ...
2
votes
5answers
1k views

Is a pfSense router w/ a LAN gateway using a /20 bits subnet mask common?

Obviously I'm lacking some networking knowledge, and I wish somebody could help me understand something fishy I found on a pfSense router in an organization yesterday. The pfSense router forces subnet ...
0
votes
1answer
559 views

What could cause kvm virtualized pfsense to get 84mbps behind physical pfsense, but then drop to 1mbps when it replaces physical pfsense?

I'm scratching my head on what could cause the following behavior: Scenario A: Laptop -> virtualizedpfsense -> switch -> physicalpfsense -> modem speedtest.com gives me 84mbps download (...
2
votes
2answers
4k views

pfSense IPv6 NAT

I know many of you said that IPv6 has no NAT, but my server provider told me, that it is possible. I have no idea how... I have a pfSense Server as my Firewall (Not the router!). I have a /28 IPv4 ...
2
votes
1answer
186 views

Pfsense stack two boxes

We have bought two Pfsense SG-4860 boxes. We have our equipment in a colocation datacenter. Our goals for this project is to have a redundant network with both routers connected to a WAN. The ...
0
votes
1answer
1k views

IP VLANS and SUBNETS on Cisco and PFSENSE

i have a PFSENSE router and a layer 3 cisco switch, the pfsense router connects to the switch on port 1 with the IP address of 192.168.1.2 and the router is 192.168.1.1 I have a vlan that i created ...
4
votes
3answers
6k views

pfSense & VMWare ESXi VLAN integration

Were setting up a pfsense box as a virtual machine inside a VMWare ESXi 6.0 environment (inside a VXRail hyper-converged Box). The target configuration is that to access any machine within this box, ...
1
vote
1answer
709 views

PfSense Port Forwarding issues

I'm having trouble forwarding a port through PfSense PF WAN: 192.168.254.203 PF LAN: 10.0.0.1 Dest: 10.0.0.6 PfSense is able to ping and ssh .0.6 from local shell, test port works on LAN, but ...
0
votes
1answer
2k views

PFsense - Reach via NAT and Proxy ARP destination behind the same firewall without the system knowing the RFC1918-IP

I'm a little bit confused and pretty sure it won't work. But a mate and me are arguing for so long now, I decided to ask you. Imagine a PFSense Firewall with 3 Interfaces. 2 different LAN-Interfaces ...
1
vote
2answers
4k views

Assign public IP of /29 block directly to a connected device in pfSense

Ultimately what I want to do is connect a second physically separate gateway, and assign its WAN port one of the public IP addresses given by our ISP. So I have the following setup currently and is ...
0
votes
1answer
344 views

Per VLAN DNS Host Override Using Same Name

Is there a way to setup PFSense so that each VLAN get's a different DNS Host Override for the same domain. As in, if I have 2 VLAN's and a client on each one goes to internalsite.com, it will ...
1
vote
1answer
3k views

Issues trunking VLANs from pfSense to Cisco switch

I am currently using an old desktop with a dual port PCI NIC as a pfSense router. Interface em0 is assigned to the WAN interface, and em1 is assigned to the LAN interface, as well as 3 VLAN interfaces ...
4
votes
1answer
1k views

pfSense Site-to-Site routes

I was presented with an issue regarding an actual setup using pfSense at two locations. pfSense Site A is the OpenVPN Server and B is the client. Everything works, the LAN on Site A can communicate ...
0
votes
1answer
457 views

High traffic caused by DHCPv6 [closed]

We have a medium sized network setup with multiple switches and one firewall (pfsense). We now have IPv6 since two months and sometimes can observe, that there is a huge amount of traffic on the ...
3
votes
3answers
1k views

How WANs work and why it is it bad to run DNS and DHCP on a router?

I have some networking questions about isolating networks and why it's bad to run DHCP and DNS on a router and should be run on a server. Question 1: What is the purpose of the WAN interface and how ...
2
votes
1answer
2k views

OSPF between Cisco & PFsense

Cisco OSPF has area 0 with 10.0.0.0/24. PFsense OSPF has area 0 with 10.0.0.0/24 and area 10 with 10.10.2.0/24 and area 20 with 192.168.122.0/24. The routers have full "FULL/DR" & "FULL/BDR" ...
1
vote
1answer
585 views

How to force users to authenticate to get IP adress from DHCP?

Can You help me !! I want to force users to authentificate to get IP from DHCP-server (win server) if not they can't get ip @ adress !! even they are connected to network
2
votes
1answer
10k views

Access pfSense LAN through OpenVPN

I'm trying to access a LAN through OpenVPN. My current setup is that I have one machine (Linux (old)) that can successfully connect to OpenVPN running on a pfSense (2.3.2) machine. Behind the pfSense ...
0
votes
4answers
600 views

Pfsense wan traffic differs from lan

Having 2 pfsense FWs in a large populated area with 3 VLANs, (students + teachers + admins), I set up limiters in the firewall rules to avoid the connection speed limits to be reached (30Mb up/dwn) ...
2
votes
1answer
5k views

Port Forwarding on unavoidable Double-NAT pfSense

I've got a pfSense box which is acting as DHCP/DNS for one LAN, which all office computers and servers connect to. We have a modem which cannot be put into bridge mode for several reasons and cannot ...
-1
votes
1answer
63 views

can you explain for me more detail this tutorial, please?

I see this tutorial, http://djinnsour.com/2015/08/23/adding-a-public-ip-address-to-a-system-behind-pfsense-using-nat-11/. Author of this blog say, add external ip to this network, so what is the ...
1
vote
1answer
268 views

ESI PBX LAN-only VoIP phone forwarding thru IPSec tunnel - remote router sees packets but not phone, doesn't forward

Okay, so we have an older X-Class ESI PBX system, an ESI IVX 128x FSIII [see below for link]. We have an LNC card installed in it, which allows for the use of up to 12 LAN-only VoIP phones. We have an ...
1
vote
1answer
2k views

pfSense join 2 networks

I've got 2 pfsense boxes taking care of separate networks, with separate gateways. We've managed to drop a cable between the 2 networks so would now like to join the 2 networks so machines on each ...
0
votes
1answer
2k views

pfSense Web UI not showing Dynamic DNS IP address

I'm running pfSense 2.2.6-RELEASE and have configured two DynDNS providers: no-ip.biz and nsupdate.info. (I added the latter since no-ip.biz started nagging that I need to log in every 30 days and ...