Perry thank you very much.  :D :D :D

I have a similar problem, my bonded pair PPPOE WAN connection drops one line and therefor the connection but PFSense 2 RC 1 (build Tue May 3 10:16:12 EDT 2011) appears not to notice, I have to reboot to get it to authenticate again. This does not happen in version 1.2.3 The Zxyel P-663H-51 modem is in bridged mode. Regards Grant

Ethernet handoffs are the simplest way for any appliance to work with be it pfsense or any other band. It's made even easier because you have a static IP block. You only need 3 things, one IP in the block you were assigned, the subnet mask and the default gateway. Assign that one IP to the WAN port and the rest into the virtual IP section to handle 1-1 mappings of the remaining IPs and away you go.

If this is the case, then you will be doing a double-NAT configuration.  In this scenario, the network segment between the WAN interface of your pfSense box and the ethernet interface of your 2811 should be treated as your WAN network segment.  The down side to this type of configuration is that you cannot allow any inbound services (SMTP, HTTP, etc) without having your provider create port forwards for you on the 2811 and then you repeat the same configuration on your pfSense box.  Your network would then look something like this: Office LAN -> pfSense LAN -> [pfSense box] -> pfSense WAN -> 2811 Ethernet -> [2811 box] -> 2811 Fiber connection -> Internet

@aasimbeck: Would you be able to provide me with some links to what I'm looking for here, and what's the fastest speed possible using that method? For PCI connectivity:  Intel MF Server Adapter (LC connector) or Pro/1000 XF Adapter (SC connector) or Pro/1000 XF Adapter (SC connector) For PCIe connectivity:  Intel PF or EF Server Adapter (Both LC connector) These are all Gigabit NICs.  Your limit would still be Gigabit ethernet.

Hi, please show us your gateway groups (screenshot), your firewall rules on the LAN interfaces. Are you sure, that the firewall rule with "WANS" as Gateway gets hit ? Firewall rules are acting from top to down. Further, if bothe gateways are Tier 1 and one gateway goes down, then there is automatically a failover. If bothe are up, it is loadbalancing. If you are using squid on this box, then loadbalancing doesn't work "out of the box". You need to do some tricks.

http://doc.pfsense.org/index.php/HOWTO_Install_pfSense#Embedded_.28Compact_Flash.29_Installation

@conquerer: Experts Please Reply As soon As Possible. Kindly guide to make server according to requirements. You're asking for a serious amount of help, for free, from people who tend to be very busy.  Do yourself a favor and read the documentation, then learn to be more patient.

@torontob: I thought OPT1 would take it's DHCP from LAN when I do the bridge on OPT1 interface. It will if firewall rules allow the initial DHCP request from OPT1. But that is a necessary condition, it may not be sufficient. What version of pfSense are you using? If you search the forums for keywords DHCP and bridge I expect you will find a number of posts discussing your issue including suitable firewall rules.

It would help others if you were to actually describe the problems you had been having and what you did to resolve them.

I recently had a similar problem that turned out be the tcp receive window set too small on the client computer (Win XP). Does it make any difference which internal computer you use? What if you try to download more than one file on the same machine, can you max out the link then? What if you try to fetch the file from the pfSense box itself? fetch -o /dev/null http://centos.pop.com.br/5.6/isos/x86_64/CentOS-5.6-x86_64-bin-1of8.iso This doesn't store the file so don't worry about space. Ctrl-C to stop downloading! Steve Edit: Clearly you know how to Ctl-C!  ::)

Thanks for the link. Just the information I needed! I really did search before posting; found many other hits, but, not this one or any that answered my question.

@johnodon: Man was that thing friggin chatty!!! The 'talky toaster' of printers?  ;) Steve

Booting the same machine from an Ubuntu USB stick also showed no restriction so I investigated further. It turned out to be the tcp receive window incorrectly set in Windows XP. It's supposed to have auto scaling but it didn't seem to be working, setting a few registry keys solved it. See: http://www.psc.edu/networking/projects/tcptune/OStune/winxp/winxp_stepbystep.html Steve

Thx Sub! :) @submicron: Slightly off topic, but Varnish is a superior reverse proxy, especially for a very high performance network.  Not sure I'd combine the proxy and firewall functions on the same box.