Questions tagged [pfsense]

pfSense is a free, open source customized distribution of FreeBSD tailored for use as a firewall and router. In addition to being a powerful, flexible firewalling and routing platform, it includes a long list of related features and a package system allowing further expandability without adding bloat and potential security vulnerabilities to the base distribution.

Filter by
Sorted by
Tagged with
0
votes
0answers
20 views

pfsense DHCPv6 relay for LAN clients [closed]

I am trying to get clients on the LAN side of my pfsense firewall to get IPv6 addresses from the DHCPv6 server on my cable modem. The cable modem has an IPv6 address and all devices on the same ...
0
votes
1answer
17 views

Site-to-Site IPSEC through load balancer with persistence

what I'm trying to achieve is a site to site IPSEC tunnel going through a load balancer, (both sites have pfsense and balancer is f5 big ip) the reason why i'm trying to do that is because: - Site A ...
0
votes
0answers
31 views

Cannot SSH into different subnet

I'm very new to pfSense and I have some very basic networking knowledge. I bought a server, installed Proxmox and virtualized pfSense. Now I want to create an enterprise ready network topology: The ...
1
vote
2answers
38 views

problems routing WAN with private IPs and LAN with public IPs

I have just installed pfsense 2.4 for a SOHO I work and I'm getting problems with the routing. I have asked my ISP for a /29 network with public ips for the DMZ, but instead of giving my directly what ...
0
votes
0answers
18 views

Can not get public ip/port of my pfsense from lan side

I am trying to connect to a server that I have setup through port forwarding. It works from all the clients on the internet, mobile, online testing sites, etc. I have verified that the machines ...
0
votes
0answers
20 views

OpnSense not assigning IP over LAN

I have a problem with the latest version of OpnSense a firewall distro) I have never had an issue until I updated to the latest version: 19.7.4 The Problem: The error I am getting is really odd. upon ...
0
votes
0answers
12 views

Is that possible to create site to site VPN between 2 sites by using a pfsense virtual machine installed in Vmware workstation? [duplicate]

I need to connect 3 sites (Site A,B and C)+ AWS Cloud together over a site to site VPN. Each site should have a VPN tunnel to the cloud Each site should have a VPN tunnel to the other sites ...
1
vote
2answers
72 views

Virtualize pfSense on VMware

I'm making a network model and I have issues with virtualization of pfSense under VMware. I have a client in a VLAN 220 (172.2.20.100/23) trying to ping his gateway (pfSense : 172.2.20.1/23) but it ...
0
votes
0answers
103 views

4 ssids with 4 public IP addresses on pfsense

I have a requirement for 4 WiFi SSIDs, each with a separate public IP. As I need some sort of firewall I was thinking to get a pfsense Netgate SG-3100 that would have its WAN port connected to the ...
0
votes
0answers
178 views

pfsense in multi-WAN: OpenVPN route all traffic through VPN, how to set the gateway?

I have an OpenVPN running on pfSense in a CARP with multi-WAN. OpenVPN listens on all incomming (0.0.0.0) so that I can enter throu what ever WAN is active right now should one go down. When I ...
-1
votes
1answer
74 views

Site-to-site IPsec and rerouting to another IPsec tunnel

We have three different geo sites (SITE1, SITE2 and SITE3) and each site has PFSense firewall installed. Sites have been connected together with IPSec tunnels. Also Site2 is connected to customer ...
0
votes
0answers
25 views

pfsense CARP with VLANs duplicate default route

I have set up a 2pf CARP with VLANs. So far everything works well however I wonder why and if it is a problem that I get on the VLANs a duplicate default route. My DHCP on the VLANs is of course set ...
3
votes
1answer
192 views

pfsense DHCP lease remember time settings?

pfSense remembers DHCP leases for a quite long time, which is good use on a LAN where the same machines request IP numbers frequently and have a chance to always get the same leases. However on an ...
2
votes
2answers
242 views

No route to host for IPs in same subnet being routed by bgp

I have set up BGP to do some custom routing for a subset of addresses in the range 192.168.1.0/24. I have verified that the BGP is working by testing ping/curl on a different host in a different ...
1
vote
2answers
155 views

How does pfSense control network traffic when plugged into a switch?

I apologize for this n00b question, but I'm trying to learn networking to help at a non-profit where the old IT guy is no longer there. They have several Cisco switches and one pfSense instance that ...
1
vote
0answers
47 views

pfSense - VPN access to the printer only

in my small company I have a LAN network connected to the outside world via pfSense based router. On this router we have OpenVPN configured for employees. In this network we have printer and several ...
0
votes
0answers
531 views

pfSense: Route traffic from LAN to OpenVPN client

I have set up OpenVPN on pfSense, and it works almost the way I want it. The client connects to the pfSense box from the WAN, is assigned a tunnel IP and can communicate with all the networks on the ...
0
votes
1answer
78 views

How to setup OpenVPN to PFsense? [closed]

How to setup OpenVPN to PFsense? My OpenVPN server used Angristan Openvpn-install, so I need to add there 3 lines to Advanced Configuration -> Custom options tls-client tls-version-min 1.2 tls-...
1
vote
0answers
55 views

Using IPv6 6in4 tunnel with multiple VLANs, or LAN Interfaces?

I have a pfSense router, and I've setup a Hurricane 6in4 IPv6 tunnel by following this guide: http://thirdinternet.com/wp-content/uploads/2017/11/Configure-6in4-Tunnel-in-pfSense.pdf It all seems to ...
0
votes
1answer
739 views

Pfsense - blocking a ping immediately

I am having a issue with pfsense... I have a rule that block ping (echo requests) from the LAN network interface to a openvpn client interface (OVP1), the rule is working fine blocking the ping to ...
0
votes
1answer
41 views

Leased 1GB fibre firewall with multiple IP LANS & tenants [closed]

I’m in desperate need of some unbiased advice and suggestions. Everyone I ask seems to want to sell me a £2-5,000 firewall appliance and £1500+ per year of support/licencing. I have a 1gb leased ...
4
votes
1answer
679 views

What does 'parent interface' mean with respect to VLANs?

I'm trying to learn about VLANs by configuring a router with PFsense installed. Reading the documentation I came across the following sentence: The following example shows how to configure two ...
1
vote
1answer
86 views

What does “delta” stand for in arpwatch?

I've just set up Arpwatch on my pfSense machine and started getting emails about flip flops in my network. As the network is quite big, I understand that the flip flops indicate that a certain IP-...
3
votes
2answers
1k views

Why would pfSense ignore arp requests?

I'm configuring pfSense 2.4.3p1 as a transparent firewall. It's running in virtual machine with two vtnet paravirtualized adapters: WAN (vtnet0) connected to a 'far-side' network containing the ...
1
vote
0answers
436 views

pfsense Server Load-balancing on LAN Interface [closed]

I am trying to load balance a couple of web servers from the LAN side as I don't need access from the WAN so that clients on the LAN can access these web servers: LAN IP is 192.168.10.1 I created a ...
3
votes
3answers
3k views

Block communication between hosts in the same VLAN

I've a pfsense firewall with a managed switch, and i created a VLAN: all works fine, but what i want to do is to block the communication between the hosts in my VLAN. For example, i want that an host ...
2
votes
1answer
922 views

Configuring the NAT 1:1 rules with pfsense

I have two pfsense. One pfsense is on 192.168.0.1 and another pfsense is on 192.168.20.1. Basically I have installed 20.1 pfsense on one machine 192.168.0.180 which is in the network of 0.1 pfsense, ...
1
vote
1answer
316 views

Pfsense CARP mutliwan

I'm currently trying to build a HA setup using Pfsense/CARP for the first time but i have a few questions about it. On the LAN side i have 3 VLAN's and they failover fine using CARP, the problem is ...
1
vote
2answers
65 views

Setting up a hypervisor network

I have a pfsense appliance that serves as my router. I have four hypervisors that I want to hook up to one of the router interfaces through a switch. The hypervisors will house multiple VMs that are "...
2
votes
1answer
1k views

Can I bulk export aliases from pfSense (in order to import to another pfSense)?

This seems like a simple thing but there doesn't appear to be an easy way (in the GUI). Before I dive into the file system level, I thought I'd ask --- is there an easy export of aliases from pfSense? ...
3
votes
1answer
98 views

How to connect servers from different Datacentres via firewall

really need help since I am still new in firewall. I have 2 firewall located in two separate Datacentres. I need to make a connection for the servers from these 2 DCs. One firewall is running pfsense ...
1
vote
0answers
610 views

Configure pfSense VLAN Trunk

I have setup a pfSense box as a transparent firewall between my Cisco router and first Cisco switch: CISCO ROUTER - 10.10.1.253 ↓ PFSENSE - OPT1 BRIDGE - 10.10.1.252 ↓ CISCO CORE SWITCH - 10.10.1.250 ...
0
votes
2answers
203 views

Ping traverses openvpn tunnel only 1 of 2 times [closed]

I can barely put into words the problem I'm having, but I'll give it a go. I have a pfsense router on which I've set up openvpn to act as a client to connect into another network. This has worked ...
2
votes
5answers
2k views

Is a pfSense router w/ a LAN gateway using a /20 bits subnet mask common?

Obviously I'm lacking some networking knowledge, and I wish somebody could help me understand something fishy I found on a pfSense router in an organization yesterday. The pfSense router forces subnet ...
0
votes
1answer
629 views

What could cause kvm virtualized pfsense to get 84mbps behind physical pfsense, but then drop to 1mbps when it replaces physical pfsense?

I'm scratching my head on what could cause the following behavior: Scenario A: Laptop -> virtualizedpfsense -> switch -> physicalpfsense -> modem speedtest.com gives me 84mbps download (...
2
votes
2answers
5k views

pfSense IPv6 NAT

I know many of you said that IPv6 has no NAT, but my server provider told me, that it is possible. I have no idea how... I have a pfSense Server as my Firewall (Not the router!). I have a /28 IPv4 ...
2
votes
1answer
192 views

Pfsense stack two boxes

We have bought two Pfsense SG-4860 boxes. We have our equipment in a colocation datacenter. Our goals for this project is to have a redundant network with both routers connected to a WAN. The ...
0
votes
1answer
1k views

IP VLANS and SUBNETS on Cisco and PFSENSE

i have a PFSENSE router and a layer 3 cisco switch, the pfsense router connects to the switch on port 1 with the IP address of 192.168.1.2 and the router is 192.168.1.1 I have a vlan that i created ...
4
votes
3answers
6k views

pfSense & VMWare ESXi VLAN integration

Were setting up a pfsense box as a virtual machine inside a VMWare ESXi 6.0 environment (inside a VXRail hyper-converged Box). The target configuration is that to access any machine within this box, ...
1
vote
1answer
729 views

PfSense Port Forwarding issues

I'm having trouble forwarding a port through PfSense PF WAN: 192.168.254.203 PF LAN: 10.0.0.1 Dest: 10.0.0.6 PfSense is able to ping and ssh .0.6 from local shell, test port works on LAN, but ...
0
votes
1answer
2k views

PFsense - Reach via NAT and Proxy ARP destination behind the same firewall without the system knowing the RFC1918-IP

I'm a little bit confused and pretty sure it won't work. But a mate and me are arguing for so long now, I decided to ask you. Imagine a PFSense Firewall with 3 Interfaces. 2 different LAN-Interfaces ...
1
vote
2answers
5k views

Assign public IP of /29 block directly to a connected device in pfSense

Ultimately what I want to do is connect a second physically separate gateway, and assign its WAN port one of the public IP addresses given by our ISP. So I have the following setup currently and is ...
0
votes
1answer
352 views

Per VLAN DNS Host Override Using Same Name

Is there a way to setup PFSense so that each VLAN get's a different DNS Host Override for the same domain. As in, if I have 2 VLAN's and a client on each one goes to internalsite.com, it will ...
1
vote
1answer
3k views

Issues trunking VLANs from pfSense to Cisco switch

I am currently using an old desktop with a dual port PCI NIC as a pfSense router. Interface em0 is assigned to the WAN interface, and em1 is assigned to the LAN interface, as well as 3 VLAN interfaces ...
4
votes
1answer
1k views

pfSense Site-to-Site routes

I was presented with an issue regarding an actual setup using pfSense at two locations. pfSense Site A is the OpenVPN Server and B is the client. Everything works, the LAN on Site A can communicate ...
0
votes
1answer
546 views

High traffic caused by DHCPv6 [closed]

We have a medium sized network setup with multiple switches and one firewall (pfsense). We now have IPv6 since two months and sometimes can observe, that there is a huge amount of traffic on the ...
3
votes
3answers
2k views

How WANs work and why it is it bad to run DNS and DHCP on a router?

I have some networking questions about isolating networks and why it's bad to run DHCP and DNS on a router and should be run on a server. Question 1: What is the purpose of the WAN interface and how ...
2
votes
1answer
2k views

OSPF between Cisco & PFsense

Cisco OSPF has area 0 with 10.0.0.0/24. PFsense OSPF has area 0 with 10.0.0.0/24 and area 10 with 10.10.2.0/24 and area 20 with 192.168.122.0/24. The routers have full "FULL/DR" & "FULL/BDR" ...
1
vote
1answer
709 views

How to force users to authenticate to get IP adress from DHCP?

Can You help me !! I want to force users to authentificate to get IP from DHCP-server (win server) if not they can't get ip @ adress !! even they are connected to network
2
votes
1answer
10k views

Access pfSense LAN through OpenVPN

I'm trying to access a LAN through OpenVPN. My current setup is that I have one machine (Linux (old)) that can successfully connect to OpenVPN running on a pfSense (2.3.2) machine. Behind the pfSense ...