@bkyuksel said in I need assistance to create company subnets:

7 access points connected to switches (no-smart or managable switch)

Well that is a problem.. For you to segment your network you either need vlan capable devices switches and AP. Or you need to do it full physical where each network is on its own hardware.

Pfsense is capable of doing vlans - but you need the rest of your infrastructure to support it. So you need at min a vlan capable switch to use as core switch, downstream switches can be dumb as long as you plan on all devices connected to these dumb switches to be in the same network/vlan.

Same goes for your AP.. if they are dumb then you would plug them into different switch port that is only on the vlan you want all wireless devices to be on that connect to that AP.

I would really suggest you invest in some vlan capable switches and AP. Doesn't have to break the bank.. This can really be done on a shoestring budget if need be..

@gertjan
This worked perfect for me thanks

Btw did any of you who participated in this UFO discussion received inbound connections (logs) from National Aeronautics and Space Administration?

AS21556 NASA Ames Research Center:
192.12.28.0/24
192.203.230.0/24
2001:500:a8::/48
2620:126:e000::/48

You look to be just using the vyper vpn client in Windows directly.

This seems completely unrelated to the pfSense WireGuard package. Moving to off-topic.

Steve

@bingo600 I don't know but suspect, one (#pfsense) was claimed in an attempt to reserve it for Netgate or the project and the second one (##pfsense) is - per liberas guidelines - a community channel and created/maintained by users/community (it also has an apropriate channel message that says it's not official/netgate driven). So that's OK but doesn't make much sense. :)

@tiger-0 What exactly do you mean by "if the expansion card - SFP+ cable and transceiver offered by Netgate" this:-

https://shop.netgate.com/collections/cables/products/10g-sfp-direct-attached-copper-twinax-passive-cable-1-meter

If so I doubt it will work with a Cisco as they are a bit fussy.

You might be better off looking at fs.com as they offer customised twinax cables.

https://www.fs.com/uk/c/direct-attach-cables-1113

@chudak

The problem is not limited to Windows.

Seem to be related to when I connect to NordVPN other systems are having troubles to connect/resolve its name/IP

What really makes it's interesting why after ping it works?!

@ttime said in FYI Fatal Error Allowed Memory:

870

Check the following:-

System, Advanced, Firewall & NAT.

Set Firewall Maximum States to 2000000
Set Firewall Maximum Table Entries to 2000000

Should resolve your issue....

@kiokoman

Ahh so that was just a "Dia drawing test" 👍

@slu said in https://blog.pfsense.org | cert expired (5.4.2021):

https://blog.pfsense.org/

yeah they should prob fix that. But it just redirects to https://www.netgate.com/blog/ which has a valid cert.

Good til Mon, 11 Apr 2022 23:59:59 GMT

Since it expired back on the 5th, prob not a lot of people using it ;) Or you would think it would of been reported before now..

Are you describing him pinging the LAN IP of the Comcast router? I would think they have that allowed by default so customers can test their connection to it.

If you were to put a pfSense router behind the Comcast router, then yes it could replace these three routers (if it had 3 interfaces + WAN), and you could set up a firewall rule to block traffic from the other two routers to 10.1.10.1.

@newberger
i don't run Microsoft products but for work.

when i did run 10 at home, it was the included AV. plus Malwarebytes pro/ paid. and basic common sense kept me malware free