Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [pfsense]

pfSense is a free, open source customized distribution of FreeBSD tailored for use as a firewall and router. In addition to being a powerful, flexible firewalling and routing platform, it includes a long list of related features and a package system allowing further expandability without adding bloat and potential security vulnerabilities to the base distribution.

-1
votes
1answer
28 views

Sito to site ipsec and reroutin to another ipsec

We have three different geo sites (SITE1, SITE2 and SITE3) and each site has PFSense firewall installed. Sites have been connected together with IPSec tunnels. Also Site2 is connected to customer ...
0
votes
0answers
17 views

pfsense CARP with VLANs duplicate default route

I have set up a 2pf CARP with VLANs. So far everything works well however I wonder why and if it is a problem that I get on the VLANs a duplicate default route. My DHCP on the VLANs is of course set ...
3
votes
1answer
32 views

pfsense DHCP lease remember time settings?

pfSense remembers DHCP leases for a quite long time, which is good use on a LAN where the same machines request IP numbers frequently and have a chance to always get the same leases. However on an ...
2
votes
2answers
102 views

No route to host for IPs in same subnet being routed by bgp

I have set up BGP to do some custom routing for a subset of addresses in the range 192.168.1.0/24. I have verified that the BGP is working by testing ping/curl on a different host in a different ...
1
vote
2answers
53 views

How does pfSense control network traffic when plugged into a switch?

I apologize for this n00b question, but I'm trying to learn networking to help at a non-profit where the old IT guy is no longer there. They have several Cisco switches and one pfSense instance that ...
1
vote
0answers
33 views

pfSense - VPN access to the printer only

in my small company I have a LAN network connected to the outside world via pfSense based router. On this router we have OpenVPN configured for employees. In this network we have printer and several ...
0
votes
0answers
372 views

pfSense: Route traffic from LAN to OpenVPN client

I have set up OpenVPN on pfSense, and it works almost the way I want it. The client connects to the pfSense box from the WAN, is assigned a tunnel IP and can communicate with all the networks on the ...
0
votes
1answer
55 views

How to setup OpenVPN to PFsense? [closed]

How to setup OpenVPN to PFsense? My OpenVPN server used Angristan Openvpn-install, so I need to add there 3 lines to Advanced Configuration -> Custom options tls-client tls-version-min 1.2 tls-...
1
vote
0answers
39 views

Using IPv6 6in4 tunnel with multiple VLANs, or LAN Interfaces?

I have a pfSense router, and I've setup a Hurricane 6in4 IPv6 tunnel by following this guide: http://thirdinternet.com/wp-content/uploads/2017/11/Configure-6in4-Tunnel-in-pfSense.pdf It all seems to ...
0
votes
1answer
341 views

Pfsense - blocking a ping immediately

I am having a issue with pfsense... I have a rule that block ping (echo requests) from the LAN network interface to a openvpn client interface (OVP1), the rule is working fine blocking the ping to ...
0
votes
1answer
35 views

Leased 1GB fibre firewall with multiple IP LANS & tenants [closed]

I’m in desperate need of some unbiased advice and suggestions. Everyone I ask seems to want to sell me a £2-5,000 firewall appliance and £1500+ per year of support/licencing. I have a 1gb leased ...
4
votes
1answer
408 views

What does 'parent interface' mean with respect to VLANs?

I'm trying to learn about VLANs by configuring a router with PFsense installed. Reading the documentation I came across the following sentence: The following example shows how to configure two ...
1
vote
1answer
70 views

What does “delta” stand for in arpwatch?

I've just set up Arpwatch on my pfSense machine and started getting emails about flip flops in my network. As the network is quite big, I understand that the flip flops indicate that a certain IP-...
2
votes
2answers
842 views

Why would pfSense ignore arp requests?

I'm configuring pfSense 2.4.3p1 as a transparent firewall. It's running in virtual machine with two vtnet paravirtualized adapters: WAN (vtnet0) connected to a 'far-side' network containing the ...
1
vote
0answers
330 views

pfsense Server Load-balancing on LAN Interface [closed]

I am trying to load balance a couple of web servers from the LAN side as I don't need access from the WAN so that clients on the LAN can access these web servers: LAN IP is 192.168.10.1 I created a ...
3
votes
3answers
2k views

Block communication between hosts in the same VLAN

I've a pfsense firewall with a managed switch, and i created a VLAN: all works fine, but what i want to do is to block the communication between the hosts in my VLAN. For example, i want that an host ...
2
votes
1answer
746 views

Configuring the NAT 1:1 rules with pfsense

I have two pfsense. One pfsense is on 192.168.0.1 and another pfsense is on 192.168.20.1. Basically I have installed 20.1 pfsense on one machine 192.168.0.180 which is in the network of 0.1 pfsense, ...
1
vote
1answer
266 views

Pfsense CARP mutliwan

I'm currently trying to build a HA setup using Pfsense/CARP for the first time but i have a few questions about it. On the LAN side i have 3 VLAN's and they failover fine using CARP, the problem is ...
1
vote
2answers
58 views

Setting up a hypervisor network

I have a pfsense appliance that serves as my router. I have four hypervisors that I want to hook up to one of the router interfaces through a switch. The hypervisors will house multiple VMs that are "...
2
votes
1answer
828 views

Can I bulk export aliases from pfSense (in order to import to another pfSense)?

This seems like a simple thing but there doesn't appear to be an easy way (in the GUI). Before I dive into the file system level, I thought I'd ask --- is there an easy export of aliases from pfSense? ...
3
votes
1answer
95 views

How to connect servers from different Datacentres via firewall

really need help since I am still new in firewall. I have 2 firewall located in two separate Datacentres. I need to make a connection for the servers from these 2 DCs. One firewall is running pfsense ...
1
vote
0answers
521 views

Configure pfSense VLAN Trunk

I have setup a pfSense box as a transparent firewall between my Cisco router and first Cisco switch: CISCO ROUTER - 10.10.1.253 ↓ PFSENSE - OPT1 BRIDGE - 10.10.1.252 ↓ CISCO CORE SWITCH - 10.10.1.250 ...
0
votes
2answers
174 views

Ping traverses openvpn tunnel only 1 of 2 times [closed]

I can barely put into words the problem I'm having, but I'll give it a go. I have a pfsense router on which I've set up openvpn to act as a client to connect into another network. This has worked ...
2
votes
5answers
1k views

Is a pfSense router w/ a LAN gateway using a /20 bits subnet mask common?

Obviously I'm lacking some networking knowledge, and I wish somebody could help me understand something fishy I found on a pfSense router in an organization yesterday. The pfSense router forces subnet ...
0
votes
1answer
518 views

What could cause kvm virtualized pfsense to get 84mbps behind physical pfsense, but then drop to 1mbps when it replaces physical pfsense?

I'm scratching my head on what could cause the following behavior: Scenario A: Laptop -> virtualizedpfsense -> switch -> physicalpfsense -> modem speedtest.com gives me 84mbps download (...
2
votes
1answer
4k views

pfSense IPv6 NAT

I know many of you said that IPv6 has no NAT, but my server provider told me, that it is possible. I have no idea how... I have a pfSense Server as my Firewall (Not the router!). I have a /28 IPv4 ...
2
votes
1answer
183 views

Pfsense stack two boxes

We have bought two Pfsense SG-4860 boxes. We have our equipment in a colocation datacenter. Our goals for this project is to have a redundant network with both routers connected to a WAN. The ...
0
votes
1answer
1k views

IP VLANS and SUBNETS on Cisco and PFSENSE

i have a PFSENSE router and a layer 3 cisco switch, the pfsense router connects to the switch on port 1 with the IP address of 192.168.1.2 and the router is 192.168.1.1 I have a vlan that i created ...
4
votes
3answers
5k views

pfSense & VMWare ESXi VLAN integration

Were setting up a pfsense box as a virtual machine inside a VMWare ESXi 6.0 environment (inside a VXRail hyper-converged Box). The target configuration is that to access any machine within this box, ...
1
vote
1answer
689 views

PfSense Port Forwarding issues

I'm having trouble forwarding a port through PfSense PF WAN: 192.168.254.203 PF LAN: 10.0.0.1 Dest: 10.0.0.6 PfSense is able to ping and ssh .0.6 from local shell, test port works on LAN, but ...
0
votes
1answer
2k views

PFsense - Reach via NAT and Proxy ARP destination behind the same firewall without the system knowing the RFC1918-IP

I'm a little bit confused and pretty sure it won't work. But a mate and me are arguing for so long now, I decided to ask you. Imagine a PFSense Firewall with 3 Interfaces. 2 different LAN-Interfaces ...
1
vote
2answers
4k views

Assign public IP of /29 block directly to a connected device in pfSense

Ultimately what I want to do is connect a second physically separate gateway, and assign its WAN port one of the public IP addresses given by our ISP. So I have the following setup currently and is ...
0
votes
1answer
333 views

Per VLAN DNS Host Override Using Same Name

Is there a way to setup PFSense so that each VLAN get's a different DNS Host Override for the same domain. As in, if I have 2 VLAN's and a client on each one goes to internalsite.com, it will ...
1
vote
1answer
3k views

Issues trunking VLANs from pfSense to Cisco switch

I am currently using an old desktop with a dual port PCI NIC as a pfSense router. Interface em0 is assigned to the WAN interface, and em1 is assigned to the LAN interface, as well as 3 VLAN interfaces ...
4
votes
1answer
1k views

pfSense Site-to-Site routes

I was presented with an issue regarding an actual setup using pfSense at two locations. pfSense Site A is the OpenVPN Server and B is the client. Everything works, the LAN on Site A can communicate ...
0
votes
1answer
410 views

High traffic caused by DHCPv6 [closed]

We have a medium sized network setup with multiple switches and one firewall (pfsense). We now have IPv6 since two months and sometimes can observe, that there is a huge amount of traffic on the ...
3
votes
3answers
1k views

How WANs work and why it is it bad to run DNS and DHCP on a router?

I have some networking questions about isolating networks and why it's bad to run DHCP and DNS on a router and should be run on a server. Question 1: What is the purpose of the WAN interface and how ...
1
vote
0answers
2k views

OSPF between Cisco & PFsense

Cisco OSPF has area 0 with 10.0.0.0/24. PFsense OSPF has area 0 with 10.0.0.0/24 and area 10 with 10.10.2.0/24 and area 20 with 192.168.122.0/24. The routers have full "FULL/DR" & "FULL/BDR" ...
1
vote
1answer
526 views

How to force users to authenticate to get IP adress from DHCP?

Can You help me !! I want to force users to authentificate to get IP from DHCP-server (win server) if not they can't get ip @ adress !! even they are connected to network
2
votes
1answer
10k views

Access pfSense LAN through OpenVPN

I'm trying to access a LAN through OpenVPN. My current setup is that I have one machine (Linux (old)) that can successfully connect to OpenVPN running on a pfSense (2.3.2) machine. Behind the pfSense ...
0
votes
4answers
572 views

Pfsense wan traffic differs from lan

Having 2 pfsense FWs in a large populated area with 3 VLANs, (students + teachers + admins), I set up limiters in the firewall rules to avoid the connection speed limits to be reached (30Mb up/dwn) ...
2
votes
1answer
4k views

Port Forwarding on unavoidable Double-NAT pfSense

I've got a pfSense box which is acting as DHCP/DNS for one LAN, which all office computers and servers connect to. We have a modem which cannot be put into bridge mode for several reasons and cannot ...
-1
votes
1answer
63 views

can you explain for me more detail this tutorial, please?

I see this tutorial, http://djinnsour.com/2015/08/23/adding-a-public-ip-address-to-a-system-behind-pfsense-using-nat-11/. Author of this blog say, add external ip to this network, so what is the ...
1
vote
1answer
252 views

ESI PBX LAN-only VoIP phone forwarding thru IPSec tunnel - remote router sees packets but not phone, doesn't forward

Okay, so we have an older X-Class ESI PBX system, an ESI IVX 128x FSIII [see below for link]. We have an LNC card installed in it, which allows for the use of up to 12 LAN-only VoIP phones. We have an ...
1
vote
1answer
2k views

pfSense join 2 networks

I've got 2 pfsense boxes taking care of separate networks, with separate gateways. We've managed to drop a cable between the 2 networks so would now like to join the 2 networks so machines on each ...
0
votes
1answer
2k views

pfSense Web UI not showing Dynamic DNS IP address

I'm running pfSense 2.2.6-RELEASE and have configured two DynDNS providers: no-ip.biz and nsupdate.info. (I added the latter since no-ip.biz started nagging that I need to log in every 30 days and ...
2
votes
1answer
481 views

Ping unlocks ipsec vpn

I have a ipsec vpn with a foreign company, this connects my network with their network and they have a different ip subnet. Ipsec is made by a pfsense gateway/firewall. I'm sure it is well configured,...
0
votes
1answer
896 views

pfSense update page (and/or regular web pages) not loading properly

Some weeks ago I installed pfSense on one of these boards, it has been working well, but today weird things started to happen. Webpages did not load properly, but only specific elements fail (date ...
3
votes
1answer
1k views

Spurious restransmission to a server behind pfsense NAT

i'm trying to connect to my ssh test server that i setup behind a pfsense firewall via nat on port 22. When I sniff packet on my laptop (WAN side of pfsense) trying to connect to the server, SYN is ...
1
vote
1answer
134 views

IPsec device downstream from router/dhcp server

Looking to implement a pfSense SG-2440 downstream from the primary router so that we can (road warrior) VPN in. I know that I'll have to forward ports 500, 50, and 51 to the pfSense device from the ...