Questions tagged [pfsense]

pfSense is a free, open source customized distribution of FreeBSD tailored for use as a firewall and router. In addition to being a powerful, flexible firewalling and routing platform, it includes a long list of related features and a package system allowing further expandability without adding bloat and potential security vulnerabilities to the base distribution.

Filter by
Sorted by
Tagged with
0
votes
0answers
38 views

OPNsense and IPv6

I've got two servers hosted at online.net. They give away 1 free /48 subnet per user and configure them using DUIDs. I'm using OPNsense as an VM (in combination with Proxmox) on each server to handle ...
0
votes
1answer
22 views

Site-to-Site IPSEC through load balancer with persistence

what I'm trying to achieve is a site to site IPSEC tunnel going through a load balancer, (both sites have pfsense and balancer is f5 big ip) the reason why i'm trying to do that is because: - Site A ...
2
votes
2answers
185 views

problems routing WAN with private IPs and LAN with public IPs

I have just installed pfsense 2.4 for a SOHO I work and I'm getting problems with the routing. I have asked my ISP for a /29 network with public ips for the DMZ, but instead of giving my directly what ...
1
vote
2answers
112 views

Virtualize pfSense on VMware

I'm making a network model and I have issues with virtualization of pfSense under VMware. I have a client in a VLAN 220 (172.2.20.100/23) trying to ping his gateway (pfSense : 172.2.20.1/23) but it ...
0
votes
0answers
309 views

pfsense in multi-WAN: OpenVPN route all traffic through VPN, how to set the gateway?

I have an OpenVPN running on pfSense in a CARP with multi-WAN. OpenVPN listens on all incomming (0.0.0.0) so that I can enter throu what ever WAN is active right now should one go down. When I ...
-1
votes
1answer
95 views

Site-to-site IPsec and rerouting to another IPsec tunnel

We have three different geo sites (SITE1, SITE2 and SITE3) and each site has PFSense firewall installed. Sites have been connected together with IPSec tunnels. Also Site2 is connected to customer ...
0
votes
0answers
41 views

pfsense CARP with VLANs duplicate default route

I have set up a 2pf CARP with VLANs. So far everything works well however I wonder why and if it is a problem that I get on the VLANs a duplicate default route. My DHCP on the VLANs is of course set ...
3
votes
1answer
436 views

pfsense DHCP lease remember time settings?

pfSense remembers DHCP leases for a quite long time, which is good use on a LAN where the same machines request IP numbers frequently and have a chance to always get the same leases. However on an ...
2
votes
2answers
330 views

No route to host for IPs in same subnet being routed by bgp

I have set up BGP to do some custom routing for a subset of addresses in the range 192.168.1.0/24. I have verified that the BGP is working by testing ping/curl on a different host in a different ...
1
vote
2answers
214 views

How does pfSense control network traffic when plugged into a switch? [closed]

I apologize for this n00b question, but I'm trying to learn networking to help at a non-profit where the old IT guy is no longer there. They have several Cisco switches and one pfSense instance that ...
1
vote
0answers
56 views

pfSense - VPN access to the printer only [closed]

in my small company I have a LAN network connected to the outside world via pfSense based router. On this router we have OpenVPN configured for employees. In this network we have printer and several ...
0
votes
1answer
83 views

How to setup OpenVPN to PFsense? [closed]

How to setup OpenVPN to PFsense? My OpenVPN server used Angristan Openvpn-install, so I need to add there 3 lines to Advanced Configuration -> Custom options tls-client tls-version-min 1.2 tls-...
1
vote
0answers
61 views

Using IPv6 6in4 tunnel with multiple VLANs, or LAN Interfaces?

I have a pfSense router, and I've setup a Hurricane 6in4 IPv6 tunnel by following this guide: http://thirdinternet.com/wp-content/uploads/2017/11/Configure-6in4-Tunnel-in-pfSense.pdf It all seems to ...
0
votes
1answer
990 views

Pfsense - blocking a ping immediately

I am having a issue with pfsense... I have a rule that block ping (echo requests) from the LAN network interface to a openvpn client interface (OVP1), the rule is working fine blocking the ping to ...
0
votes
1answer
50 views

Leased 1GB fibre firewall with multiple IP LANS & tenants [closed]

I’m in desperate need of some unbiased advice and suggestions. Everyone I ask seems to want to sell me a £2-5,000 firewall appliance and £1500+ per year of support/licencing. I have a 1gb leased ...
4
votes
1answer
852 views

What does 'parent interface' mean with respect to VLANs?

I'm trying to learn about VLANs by configuring a router with PFsense installed. Reading the documentation I came across the following sentence: The following example shows how to configure two ...
1
vote
1answer
93 views

What does “delta” stand for in arpwatch?

I've just set up Arpwatch on my pfSense machine and started getting emails about flip flops in my network. As the network is quite big, I understand that the flip flops indicate that a certain IP-...
3
votes
2answers
2k views

Why would pfSense ignore arp requests?

I'm configuring pfSense 2.4.3p1 as a transparent firewall. It's running in virtual machine with two vtnet paravirtualized adapters: WAN (vtnet0) connected to a 'far-side' network containing the ...
1
vote
0answers
488 views

pfsense Server Load-balancing on LAN Interface [closed]

I am trying to load balance a couple of web servers from the LAN side as I don't need access from the WAN so that clients on the LAN can access these web servers: LAN IP is 192.168.10.1 I created a ...
3
votes
3answers
3k views

Block communication between hosts in the same VLAN

I've a pfsense firewall with a managed switch, and i created a VLAN: all works fine, but what i want to do is to block the communication between the hosts in my VLAN. For example, i want that an host ...
2
votes
1answer
1k views

Configuring the NAT 1:1 rules with pfsense

I have two pfsense. One pfsense is on 192.168.0.1 and another pfsense is on 192.168.20.1. Basically I have installed 20.1 pfsense on one machine 192.168.0.180 which is in the network of 0.1 pfsense, ...
1
vote
1answer
334 views

Pfsense CARP mutliwan

I'm currently trying to build a HA setup using Pfsense/CARP for the first time but i have a few questions about it. On the LAN side i have 3 VLAN's and they failover fine using CARP, the problem is ...
1
vote
2answers
75 views

Setting up a hypervisor network

I have a pfsense appliance that serves as my router. I have four hypervisors that I want to hook up to one of the router interfaces through a switch. The hypervisors will house multiple VMs that are "...
2
votes
1answer
2k views

Can I bulk export aliases from pfSense (in order to import to another pfSense)?

This seems like a simple thing but there doesn't appear to be an easy way (in the GUI). Before I dive into the file system level, I thought I'd ask --- is there an easy export of aliases from pfSense? ...
3
votes
1answer
99 views

How to connect servers from different Datacentres via firewall

really need help since I am still new in firewall. I have 2 firewall located in two separate Datacentres. I need to make a connection for the servers from these 2 DCs. One firewall is running pfsense ...
1
vote
0answers
640 views

Configure pfSense VLAN Trunk

I have setup a pfSense box as a transparent firewall between my Cisco router and first Cisco switch: CISCO ROUTER - 10.10.1.253 ↓ PFSENSE - OPT1 BRIDGE - 10.10.1.252 ↓ CISCO CORE SWITCH - 10.10.1.250 ...
0
votes
2answers
214 views

Ping traverses openvpn tunnel only 1 of 2 times [closed]

I can barely put into words the problem I'm having, but I'll give it a go. I have a pfsense router on which I've set up openvpn to act as a client to connect into another network. This has worked ...
2
votes
5answers
2k views

Is a pfSense router w/ a LAN gateway using a /20 bits subnet mask common?

Obviously I'm lacking some networking knowledge, and I wish somebody could help me understand something fishy I found on a pfSense router in an organization yesterday. The pfSense router forces subnet ...
1
vote
1answer
715 views

What could cause kvm virtualized pfsense to get 84mbps behind physical pfsense, but then drop to 1mbps when it replaces physical pfsense?

I'm scratching my head on what could cause the following behavior: Scenario A: Laptop -> virtualizedpfsense -> switch -> physicalpfsense -> modem speedtest.com gives me 84mbps download (...
2
votes
2answers
5k views

pfSense IPv6 NAT

I know many of you said that IPv6 has no NAT, but my server provider told me, that it is possible. I have no idea how... I have a pfSense Server as my Firewall (Not the router!). I have a /28 IPv4 ...
2
votes
1answer
204 views

Pfsense stack two boxes

We have bought two Pfsense SG-4860 boxes. We have our equipment in a colocation datacenter. Our goals for this project is to have a redundant network with both routers connected to a WAN. The ...
0
votes
1answer
1k views

IP VLANS and SUBNETS on Cisco and PFSENSE

i have a PFSENSE router and a layer 3 cisco switch, the pfsense router connects to the switch on port 1 with the IP address of 192.168.1.2 and the router is 192.168.1.1 I have a vlan that i created ...
5
votes
3answers
7k views

pfSense & VMWare ESXi VLAN integration

Were setting up a pfsense box as a virtual machine inside a VMWare ESXi 6.0 environment (inside a VXRail hyper-converged Box). The target configuration is that to access any machine within this box, ...
1
vote
1answer
747 views

PfSense Port Forwarding issues

I'm having trouble forwarding a port through PfSense PF WAN: 192.168.254.203 PF LAN: 10.0.0.1 Dest: 10.0.0.6 PfSense is able to ping and ssh .0.6 from local shell, test port works on LAN, but ...
0
votes
1answer
2k views

PFsense - Reach via NAT and Proxy ARP destination behind the same firewall without the system knowing the RFC1918-IP

I'm a little bit confused and pretty sure it won't work. But a mate and me are arguing for so long now, I decided to ask you. Imagine a PFSense Firewall with 3 Interfaces. 2 different LAN-Interfaces ...
1
vote
2answers
5k views

Assign public IP of /29 block directly to a connected device in pfSense

Ultimately what I want to do is connect a second physically separate gateway, and assign its WAN port one of the public IP addresses given by our ISP. So I have the following setup currently and is ...
0
votes
1answer
360 views

Per VLAN DNS Host Override Using Same Name

Is there a way to setup PFSense so that each VLAN get's a different DNS Host Override for the same domain. As in, if I have 2 VLAN's and a client on each one goes to internalsite.com, it will ...
1
vote
1answer
3k views

Issues trunking VLANs from pfSense to Cisco switch

I am currently using an old desktop with a dual port PCI NIC as a pfSense router. Interface em0 is assigned to the WAN interface, and em1 is assigned to the LAN interface, as well as 3 VLAN interfaces ...
4
votes
1answer
1k views

pfSense Site-to-Site routes

I was presented with an issue regarding an actual setup using pfSense at two locations. pfSense Site A is the OpenVPN Server and B is the client. Everything works, the LAN on Site A can communicate ...
0
votes
1answer
613 views

High traffic caused by DHCPv6 [closed]

We have a medium sized network setup with multiple switches and one firewall (pfsense). We now have IPv6 since two months and sometimes can observe, that there is a huge amount of traffic on the ...
3
votes
3answers
2k views

How WANs work and why it is it bad to run DNS and DHCP on a router?

I have some networking questions about isolating networks and why it's bad to run DHCP and DNS on a router and should be run on a server. Question 1: What is the purpose of the WAN interface and how ...
2
votes
1answer
2k views

OSPF between Cisco & PFsense

Cisco OSPF has area 0 with 10.0.0.0/24. PFsense OSPF has area 0 with 10.0.0.0/24 and area 10 with 10.10.2.0/24 and area 20 with 192.168.122.0/24. The routers have full "FULL/DR" & "FULL/BDR" ...
1
vote
1answer
821 views

How to force users to authenticate to get IP adress from DHCP?

Can You help me !! I want to force users to authentificate to get IP from DHCP-server (win server) if not they can't get ip @ adress !! even they are connected to network
2
votes
1answer
10k views

Access pfSense LAN through OpenVPN

I'm trying to access a LAN through OpenVPN. My current setup is that I have one machine (Linux (old)) that can successfully connect to OpenVPN running on a pfSense (2.3.2) machine. Behind the pfSense ...
0
votes
4answers
646 views

Pfsense wan traffic differs from lan

Having 2 pfsense FWs in a large populated area with 3 VLANs, (students + teachers + admins), I set up limiters in the firewall rules to avoid the connection speed limits to be reached (30Mb up/dwn) ...
2
votes
1answer
5k views

Port Forwarding on unavoidable Double-NAT pfSense

I've got a pfSense box which is acting as DHCP/DNS for one LAN, which all office computers and servers connect to. We have a modem which cannot be put into bridge mode for several reasons and cannot ...
-1
votes
1answer
66 views

can you explain for me more detail this tutorial, please?

I see this tutorial, http://djinnsour.com/2015/08/23/adding-a-public-ip-address-to-a-system-behind-pfsense-using-nat-11/. Author of this blog say, add external ip to this network, so what is the ...
1
vote
1answer
302 views

ESI PBX LAN-only VoIP phone forwarding thru IPSec tunnel - remote router sees packets but not phone, doesn't forward

Okay, so we have an older X-Class ESI PBX system, an ESI IVX 128x FSIII [see below for link]. We have an LNC card installed in it, which allows for the use of up to 12 LAN-only VoIP phones. We have an ...
1
vote
1answer
3k views

pfSense join 2 networks

I've got 2 pfsense boxes taking care of separate networks, with separate gateways. We've managed to drop a cable between the 2 networks so would now like to join the 2 networks so machines on each ...
0
votes
1answer
2k views

pfSense Web UI not showing Dynamic DNS IP address

I'm running pfSense 2.2.6-RELEASE and have configured two DynDNS providers: no-ip.biz and nsupdate.info. (I added the latter since no-ip.biz started nagging that I need to log in every 30 days and ...