Look in the include files in https://github.com/pfsense/pfsense/tree/master/src/etc/inc ipsec.inc would be a good guess for a start  ;)

I think he's saying he's trying to use the AP as a switch. You would have to make the switch ports tagged ports on the AP for that to work.

Thanks, I'll add that one too.

@cmb: That would be the safest thing to do at this point, but yeah given it's limited to /root/ it's not strictly necessary. You probably need to set noschg before deleting. cd /root/ && chflags -R noschg * Then the rm -rf you were trying. Make sure you only do that when you're in /root/ otherwise you'll be doing the reinstall and restore. Make sure to backup your config before doing that just in case. Haa haa you are great! Instead of * I just specified the few files/folders that I needed to delete and the rm -Rf command worked like a charm! Thanks!

@virgiliomi: @The: UniFi AP's are not 802.3af natively remember. https://www.ubnt.com/accessories/instant-8023af-adapters/ That depends on the AP model used. Their current AC-Pro model does support both 802.3af (PoE) and 802.3at (PoE+). I do see that their two lower models don't, though. That's right, forgot about that one!

sorry for that sir, :( with regards with my firewall setting or even the rules it's all by default, that all lan can pass.

https://forum.pfsense.org/index.php?topic=105315.0

https://forum.pfsense.org/index.php?topic=105315.0

I know it's not fixed in 2.3 beta. I am still getting them but nowhere near the rate you are. For my use, the percentage of discarded packets is so small (around one thousand of a percent) that I didn't bother researching it further. Have you tried the tips on Pfsense NIC tuning? Carlos

Marking this topic as solved. I've already deployed my pfSense to our production environment. I am currently monitoring its stability. I did not encounter any issues with the setup I made, thanks for enlightening me.  ;D

or just mkdir -p /usr/local/share/nmap/; fetch -o /usr/local/share/nmap/nmap-mac-prefixes http://nmap.org/svn/nmap-mac-prefixes Don't have to install the nmap package [image: vendorsforarp.png] [image: vendorsforarp.png_thumb]

Either something off a subnet of the /24 or something off a different subnet. It really doesn't matter - you can do what you want. Without more knowledge of what you're trying to do and what your WAN interface scheme is and what is routed to you it would just be guessing.

Run Virtualbox with 2 VM's, one for pfSense and one for your Lubuntu client.  I just talked about this exact same scenario in this thread.

probably somewhere in the next 10 years or so ;) 3.0 will be a complete rewrite of ALL the backend code. Its not something you should wait for, it'll be a while. 2.3 will probably release within 6 months, chances are there will be some point release after that. (2.3.1 , 2.3.2) while i've not seen any official statement about this, i expect there to be a 2.4 release prior to 3.0

System: Gateways: Edit gateway  => disable gateway monitoring for the openvpn. When it happens, everyone inside the network can work fine, but they just cannot get out on the internet. Can you still login to the pfSense webgui at this point?  ==> check logs when the problem is occuring, it might indicate the cause. Can you ping to a public ip (like 8.8.8.8) ? ==> if you can still ping that ip but have no internet, then you have a DNS issue. in other words, we need more data. you can ofcourse just contact pfSense support that was included with your purchase … but if this ends up being an end-user issue, then you might waste precious minutes in the contract. (I have no clue how the official support works, so i'm not sure how the "billing" works)

As explained in French section too: there is no reason to face problem while configuring Daloradius as back-end Radius server assuming this one behaves as real Radius server  ;) limiting connection time using vouchers is straightforward. Using Radius for authentication, I don't know how to achieve it as this would mean to prevent authentication. Coupling captive portal with http proxy (assuming goal is to control HTTP flow) would be easier, IMHO