We have an ALIX board causing problems. It's going back for warranty repair :)

I solved the problem. Disabling CDP on the VLAN interfaces at the Cisco Router fixed the problem.

Only remove

;D Thank you very much. Using root did the trick and allowed me to transparently ssh to machines behind the firewall and using public key as credentials…very neat!

You can choose the monitor type for the load balancer entries (TCP or ICMP, I think, there may be more)

That makes sense…  Glad ya got it working...

Aha! Sorted! I've add the following line to /root/.tcshrc setenv PACKAGESITE "ftp://ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-7-stable/Latest/" Works great.  ;D Thanks again Jim.

Thanks, I had misunderstood how filtering is applied but this cleared it.

cough google cough http://doc.pfsense.org/index.php/Known_Working_3G_Modems

@BlueToast: Alright, it works now. For anyone else that has the same or similar situation… Make sure you have the right CIDR. This fixed my problem. You don't have to add your static IP for WAN to the Virtual IPs page. You can have the two boxes at the bottom of WAN interface page (for bogon networks and private networks) checked/enabled. You don't have to add an entry to NAT 1:1 with your Static IP Subnet <-> LAN Subnet. Thanks for the update and glad to see you got it! Good Luck!

Marty, Post a couple screen shots of your static route page and your LAN firewall rules for a starting point. From what you explain the .0/LAN interface and the .1 static routed network are on two different physical switchs??They are not vlan setups through a  switch?  Do you have both of these subnets running off of one physical nic on the pfSense box? Which of the two subnets are the actual servers residing in? Sounds like you are getting 'one way communication' (randomly.?) If you enable logging on your lan firewall rules after lots of eye squinting you will probably being able to see what ports are not talking both directions. This would make sense why pings are A-OK. Barry

@nbben: To access it, I'd simply set my local PCs network settings accordingly. Details please. @nbben: However, as soon as it's plugged into the switch, all inbound/outbound traffic on the network stops. Please elaborate: All traffic from all PC's you modified but not traffic from PCs you didn't modify? All traffic from existing connections? Pings by hostname? pings by IP address? traffic originating in the pfSense box connected to the Internet? Was the pfSense box connected to the Internet still running normally? Did it report anything significant on the console or any of the logs? etc

No. You could give those static allocations in your DHCP configuration, but that's about as close as you'll get.

it depends on whom initiated the SYN

Sure- Off to a service call I go…    :)

I have just discovered this in my Belkin node (not to give it a type of network device, as I find that just A confuses you the most lol). But I came across this when using my Belkin router (as a router as it where). In connection type (ultimately what would be for the Internet right?) Usually when I go for virgin media's connection it will always be dynamic, but wouldnt it be static if it was using the dhcp server from my new gateway with pf sense controlling it? Therefore, if I go into that and set these: To enter your Static IP settings, type in your information below and click "Apply changes". More Info IP Address > . . . Subnet Mask > . . . ISP Gateway Address > What would I put in the above fields? Might just work, if I think about this logically. Just wanted to give this at least 1 more stab just to see if I can get this working, dont want to fork out extra money and find out I could have done this with what I already have, save some money so to speak. Any helps appreciated. Jeremy

@jimp: You could always install the shellcmd package and put a shellcmd in that runs the command you want, then it would happen at bootup. Not "easy", but the answer I was looking fore. Thanks