You propably read this? you can try this to connect

Yeah, but when I picked the R210 I picked a server without hardware RAID or redundant power supplies as an option.  :)

ehh that was my question? if I can let them work together /edit: I see that I can only config Radius User with the frontend, does anyone could tell me where the data is saved? not in /etc/raddb or /usr/local/etc/raddb/clients /edit: Sorry got it, I'm too new to pfsense ;)

If you have VirtualBox/ESX, you can grab a pre-made builder image from here: http://devwiki.pfsense.org/DevelopersBootStrapAndDevIso You can use that VM to compile things and then move them to the firewall. The usual disclaimers apply, though, anything you install will reduce the overall security/integrity of the system, yadda yadda yadda.

Update to a current snapshot. That is now the default setting if you leave the service name blank, it sends the null. No real need to check that box anymore.

Not only that, but I'd say by disabling certain bits like ACPI and maybe IOAPIC, you might actually reduce performance. BIOS tweaks aren't going to buy you a whole lot, but it is a good practice in general to disable hardware you aren't using.

Thankyou!! yes.. i missed that..

pfSense doesn't have anything to do with Fiber Channel equipment and I'm honestly not sure how you plan to use either for your install.  FC equipment is used to connect servers to storage, not servers to servers for network traffic.

Item #2 may be worth trying on the most current code for the snort package. (Not sure how well it's working on 1.2.3, but on 2.0 it's been working) - Lots of fixes have gone into it over the last few weeks.

@syedadi: the reason my network have two isolated subnet because of the security, so changing the subnetmask is not piratical. You may find it helpful to read http://forum.pfsense.org/index.php/topic,39604.0.html It is not a trivial task to provide real isolation between two subnets sharing the same ethernet segment.

Don't bug people via private message for help, it's against our rules (otherwise we'd all be wading through 1000 PMs every day) and definitely not going to encourage answers (I /dev/nulled that and am answering now just because I stumbled across it browsing threads). That isn't currently supported, you can't use md5sig currently (far more to it than a kernel option).

@submicron: If a company already has a significant investment in Juniper gear, they're going to be fairly skeptical of some candidate who wants to strip it all out for another solution.  Its better to learn the gear they have, be proficient with it and then after you've proved yourself to your employer, make appropriate recommendations for how to make improvements.  You'll also find that this approach tends to help you plan your pfSense deployments a little better since you already know how the network is configured and can keep an eye out for the little gotchas that any large network retooling project has. This is a very honest advice. Two thumbs up for this. @Derek: "if it ain't broke, don't fix it." This one I learned in a hard way. ::)

Because nobody took the effort to convert to mpd5 and/or nobody has requested/supported for it to go to mpd5.

@tim29: Is there any way to do this with just two NICs? That would make this particular installation a lot easier. Yes, use a small VLAN capable switch as "port multiplier" for one of your pfSense NIC: one "trunk" port between the switch and pfSense, one switch port to each office. There has been a number of posts on VLANs in the last few weeks. A search of the forums for VLAN should turn up useful additional information.

The network map will help. http://www.pfsense.org/index.php?option=com_content&task=view&id=62&Itemid=73 Steve

https://…/services_captiveportal.php "Enable captive portal" is not enabled

@thewev: The 00:bd:4a:4c:00:00 MAC is for TAP0. I guess pfSense assigned it TAP0 when I created an old OVPN configuration. Is there such a thing like a "private MAC range" similar to the privat IP subnets? Where does pfSense pull the MAC from?

Actually i can't i've got only one isp link and no cp at use.. But here are smarter ones also