http://blog.pfsense.org/?p=509

Can you explain better what you mean with:
"but on the 4096/512 lines the upload traffic goes up to 1.5meg per line (the line only support 512k)"
This doesn't really make sense.

If you want to balance uneven you can add a single line multiple times to the pool, thus weighting a link more.

Are you even using a DMZ? You need to adjust the various rules and so-on that are in the tutorials to match your own addresses if you're not going to use the ones in the example.

That's right dotdash the gatey way is xxx.254.
I have reset the pfsense and made the tutorial from GruensFroeschli again and now it functions!!!!

Thanks a lot!!!

ok.. some of the logs of my opt1 interface:
Apr 7 16:35:44   opt1   192.168.1.102:51072   192.168.1.254:53   UDP
Apr 7 16:35:44 opt1 192.168.1.102:58188 192.168.1.253:53 UDP
Apr 7 16:35:44 opt1 192.168.1.102:53841 192.168.1.254:53 UDP
Apr 7 16:35:44 opt1 192.168.1.102:59647 192.168.1.254:53 UDP

Obviously DNS queries. So i can confirm the packets reach OPT1 interface. If I enable vpn, the 192.168.1.0/24 clients actually can connect to my 192.168.5.0/24 clients (thru vpn but slow as hell)

Problem is that… well packets are not routed between subnets... Smth is wrong in my pfsense config....

From the 1.x subnet, does a ping to a 3.x system get a response?

oooooh bugger :D Thank you! This was exactly the problem. I didn't have a default route back into the .3 subnet - stupid me. The pfsense box was configured ok, but on the .1 client there was a different default gateway which didn't know anything about the .3 subnet.

Thanks again! Works now :)

I did a google search on the matter and they all seem to point to a company called peplink.  After looking at there specs, it offered 7 different load balance algorithms in addition to round-robin, I guess:

Weighted
Enforced
Persistence
Priority
Overflow
Least Used
Lowest Latency Load Balancing Algorithms

Does anyone know if they work or lockup under heavy load?  Their prices are too high, in my opinion…  Sure wish pfsense offers a few more algorithms to utilize my wans more efficiently.  Or perhaps thru addons....???

@handanril:

http://www.pfsense.org/mirror.php?section=tutorials/policybased_multiwan/policybased_multiwan.pdf

Don't use that, it's outdated and partially wrong. I just overwrote it with a pointer to the current documentation here:
http://doc.pfsense.org/index.php/MultiWanVersion1.2
though it'll take a bit for the mirrors to sync.

and that's not really thorough, the best source of info is in the book.  http://pfsense.org/book

It works. Thanks a lot!!  ;D

You'd have to put a NAT device on one of them since the gateway IPs are the same.

You can manually configure lagg to accomplish that. Nothing in the GUI til 2.0.

@lordarcane:

Any example config on how to implement this? My company are about to implement a backup (copper) line. So, my first thought was two pf sense boxes, one primary, with the wan on the fibre channel, and one secondary, with the wan on the backup line. Then running carp for the external and internal ip failover and pfsync between the boxes.

Would this be right? It would not be dual wan, but dual pfsense. =)

Sure, you can do that. Detailed examples in the book.  http://pfsense.org/book

The broadcast address is determined by your subnet mask. If it's not what it should be, you're using the wrong mask.

You're causing routing complications with that kind of a setup. Put LAN2 off of another interface on pfSense, and leave WAN2 connected to the Linksys (but change the subnet if you want to leave LAN2 as is).

That's not possible because of the way PF works, and won't change in the near future. You can use an intermediate NAT device on one of the connections.

just go to services >dhcp server and enter in open dns as dns servers worked for me

@brc0ld:

Greetings

I've just got an Alix board and put Pfsense nanobsd-version on it. Was surprisingly easy. Just ordered the book and should be getting it this week.

Was wondering if anyone could help me with a good setup.
Now I'd like to purchase a WLAN Router/AP(that has N) or similar.(Netgear WNDR3700 as example)

This is what i was thinking of doing:

-(Internet)-WAN(Modem/Router Combo provided by ISP)LAN-WAN(ALIX board with Pfsense)LAN-WAN(WNDR3700)LAN-(Gbit Switch)-(Devices..PC..NAS..Console etc)

The Modem Router Combo is needed because the TV runs over that.
I'd like to install the the squid package on pfsense and use it as a Firewall/Filter to all machines hooked up to the WNDR3700 before accessing the internet.

I'd like the WNDR3700 Subnet to be different from the Modem/Router Combo subnet.

With this setup i'd have a fast Gbit Lan and a filtered internet access.

Would this work? Any recommendations? WNDR3700 alternatives?

Thanks for the help.

Does the TV you mentioned runs behind the ISP provided router? or it behind pfSense? If it's the former then your wireless clients is in a different subnet, otherwise they're on the same subnet. If I were you I'll just procure a wireless interface instead of an AP then assign a different subnet for the wireless interface, well that's just me.

I've deployed a similar setup wherein I have multiple Linksys WAP54G AP behind pfSense + bridged Untangle.

Only the interfaces for which a gateway has been configured will show up.