That is the dashboard for 2.0 beta. If your using 2.0 beta then click the + box at the top to customize your setup and save… There was and still may be a package to add this to 1.2.3...  Im not sure if it is still available or not.

Not really. The gateway status isn't exposed by anything directly on the system like that for snmp… I suppose if an agent for any of those can execute a script you could hack together a gateway status script that would pass the info back to your NMS. Doing that is still probably easier (and better from a logic standpoint) than sending out an e-mail when a gateway is down.

haha thanks, unfortunately i don't have enough from for additional NICs (yet) and i was using plip to test some stuff in order to get approval for a hardware upgrade I'll try upgrading the backup box to the release and see if its still capable of doing what we're currently doing with the RC version

If you connect your linksys router to OPT1 then you can configure pfSense to use both WAN connections for load balancing or failover. I would have thought you would want to use both if you are paying for them. Rename OPT1 as WAN2 for simplicity. Leave DHCP on in the Linksys and have pfSense get it's IP for WAN2 that way. Traffic going via WAN2 will be double NATed but that usually works fine just make sure they're using different subnets and you have unchecked 'block private networks' in pfSense. This way if your pfSense box expires (why would it?) you only have to move one cable, from pfSense LAN into the Linksys, to get back on line. You don't even have to reconfigure anything. Steve

VPN - possibly to a server you own since the common VPN providers will almost certainly be blocked. I've taken that approach in the past and it's worked well for me.

I think this might help you: http://en.wikipedia.org/wiki/Subnetwork#Subnet_and_host_counts 192.168.0.75/31 - specifies just one PC at 192.168.0.75 192.168.0.0/24 - specifies all PC's, routers and printers in the 192.168.0.1-254 range If you want just one IP in your subnet it's a /32.

Do not know all english expressions therefore I better let talk pictures. You need to enter this domains on all the clients from where you want to establish the connection by hostname. I think in a windows domain you could use GPOs for that. [image: domains.JPG] [image: domains.JPG_thumb]

Yes you can do that with bridging.

For HTTP simply forward port 80/TCP to the web server - ensuring that the host running the web server has a fixed IP on your LAN.

That's great, thanks for that.

a good one is: Syslog Watcher for Windows and you can read the logs in pfsense terminal with command: clog /var/log/… thanks

This is very interesting after I poke around i can actually see that the CPU hog for IRQ19 is used by "Intel ATA Controller" as i can see it during the system bootup and it scroll by the screen. then I check my system BIOS and my on-board SATA controller is already using IDE mode (non AHCI mode). So i went and disable just about everything I can find under the BIOS related to AHCI or disk mode and access, but nothing will make the CPU hog of IRQ19 drop. So finally I decided to change my SATA controller from IDE mode to AHCI mode, then after a reboot, my CPU usage is down to about 0% now. So this is interesting that it should be set to AHCI mode on this hardware combination. This has been a good learning experience.

@elade: hi all the method to obtaining an public IP address via israeli ISP's over cable infrastructure is a bit different and non regular i wonder if i can use pfSense as my firewall / router insted of my old Cisco 1841 that cannot holdup my new bandwidth ? :( This is how the connection achieved in the cisco way: pseudowire-class ISP encapsulation l2tpv2 ip local interface FastEthernet0/1 interface FastEthernet0/1 description WAN interface to ISP (connected to cable modem) ip address dhcp duplex auto speed auto interface Virtual-PPP1 description L2TP dialer to 014 (014 is My ISP) ip address negotiated ip nat outside ppp pap sent-username USER-NAME password PASSWORD pseudowire <isp-l2tp-server-address>1 pw-class ISP ip route 0.0.0.0 0.0.0.0 Virtual-PPP1 ip route <isp-l2tp-server-address>255.255.255.255 FastEthernet0/1 dhcp thanks in advance elad.</isp-l2tp-server-address></isp-l2tp-server-address> Definitely not on 1.2.3 – Israeli ISPs use PPTP or L2TP on cable infrastructure which require getting a Private IP over the HOT network via DHCP.  Then you need to run a tunnel on this network to the ISP's PPTP or L2TP server.  2.0 can support this, but you will have to choose DHCP as the method of connection on the WAN then create a separate PPTP or L2TP connection on top of it, then you will have to make sure all your traffic is routed out through the VPN (PPTP/L2TP [NAT/Firewall rules]), etc. Some ISPs in Israel may still support MPLS on special request; you may be able to avoid this aggravation if you can convince them.

I really screwed it up. I originally was trying to design this network to be able to connect into my ESXi machine to test IPV6 in Windows Server 2008. I wanted a separate network that would stem from the Server 2008 box to hand out IPV6 DHCP, but I also wanted the server to have IPV4 connectivity to offer other services to my IPV4 network. I think maybe I am just in over my head. I included a diagram of how I had things before, which makes it painfully obvious why nothing was working. The right side of the diagram is my attempt at fixing the network to get the functionality I want through VLANs and Router on a Stick (never been able to get pfsense to do VLAN routing) but I quit when concluded that I really didn't know what I was doing. Feel free to take a look if you want. I pick things up pretty quick, maybe you will have a suggestion or help point me in the right direction. http://i427.photobucket.com/albums/pp360/xtropx/network.jpg

WDS is not currently available in any form.  I've done some experiments with it because I wanted to get it into 2.0, but I haven't really been able to get anything working.

haha, my bad, but yes they would be RAD :-)

Hmmm… That doesn't seem to work. I've tried both adding it to cron from the shell and I've also tried the Cron package. No dice. I finally got it working using this hint: http://forum.pfsense.org/index.php/topic,16767.msg91804.html#msg91804 There's just one thing - the string ends with == and you should not enter that. Just use the string between ? and == Guys, thanks a lot for all the help, now my machine does everything I need it to do :)