"address Range I used in OpenVPN <=> public ip of webserver" How would that be??  You assigned public address space to your vpnclients?

Look in the include files in https://github.com/pfsense/pfsense/tree/master/src/etc/inc ipsec.inc would be a good guess for a start  ;)

I think he's saying he's trying to use the AP as a switch. You would have to make the switch ports tagged ports on the AP for that to work.

Thanks, I'll add that one too.

@cmb: That would be the safest thing to do at this point, but yeah given it's limited to /root/ it's not strictly necessary. You probably need to set noschg before deleting. cd /root/ && chflags -R noschg * Then the rm -rf you were trying. Make sure you only do that when you're in /root/ otherwise you'll be doing the reinstall and restore. Make sure to backup your config before doing that just in case. Haa haa you are great! Instead of * I just specified the few files/folders that I needed to delete and the rm -Rf command worked like a charm! Thanks!

@virgiliomi: @The: UniFi AP's are not 802.3af natively remember. https://www.ubnt.com/accessories/instant-8023af-adapters/ That depends on the AP model used. Their current AC-Pro model does support both 802.3af (PoE) and 802.3at (PoE+). I do see that their two lower models don't, though. That's right, forgot about that one!

sorry for that sir, :( with regards with my firewall setting or even the rules it's all by default, that all lan can pass.

https://forum.pfsense.org/index.php?topic=105315.0

https://forum.pfsense.org/index.php?topic=105315.0

I know it's not fixed in 2.3 beta. I am still getting them but nowhere near the rate you are. For my use, the percentage of discarded packets is so small (around one thousand of a percent) that I didn't bother researching it further. Have you tried the tips on Pfsense NIC tuning? Carlos

Marking this topic as solved. I've already deployed my pfSense to our production environment. I am currently monitoring its stability. I did not encounter any issues with the setup I made, thanks for enlightening me.  ;D

or just mkdir -p /usr/local/share/nmap/; fetch -o /usr/local/share/nmap/nmap-mac-prefixes http://nmap.org/svn/nmap-mac-prefixes Don't have to install the nmap package [image: vendorsforarp.png] [image: vendorsforarp.png_thumb]

Either something off a subnet of the /24 or something off a different subnet. It really doesn't matter - you can do what you want. Without more knowledge of what you're trying to do and what your WAN interface scheme is and what is routed to you it would just be guessing.

Run Virtualbox with 2 VM's, one for pfSense and one for your Lubuntu client.  I just talked about this exact same scenario in this thread.

probably somewhere in the next 10 years or so ;) 3.0 will be a complete rewrite of ALL the backend code. Its not something you should wait for, it'll be a while. 2.3 will probably release within 6 months, chances are there will be some point release after that. (2.3.1 , 2.3.2) while i've not seen any official statement about this, i expect there to be a 2.4 release prior to 3.0