https://doc.pfsense.org/index.php/Accessing_modem_from_inside_firewall

Lets all not forget that the IP database of location data - is far from perfect.. Having a bitch of time trying to get maxmind to update theirs.. A /24 off our /16 they kept saying was in Malaysia..  When clearly its in the US..  Tried for months to get them to correct via their forms with little luck, until it became moot when we no longer proxied data web traffic through that connection. As to what vpn service your using.. Unless you got one that allows you to pick your endpoint location and country and you did.. And just using it to mask your traffic from your local isp then sure the endpoint could be almost anywhere does not matter where the HQ of the company is, etc.  If your having a issue with your VPN ip now showing the origin country that you want for its IP, then you should get with your vpn provider.. Again - geoip information is not an exact science ;) This is not TV where they get an IP and lookup that is located in the bedroom of the house on 123 Street on the 2nd floor hehehehe

I've described it here two days ago: https://forum.pfsense.org/index.php?topic=146424.msg795676#msg795676

Some IPv6 & IPv4 multicast comming from the clients regardless of enabling IPv6. Also out of state traffic. https://doc.pfsense.org/index.php/Why_do_my_logs_show_%22blocked%22_for_traffic_from_a_legitimate_connection. If you don't want to see the IPv6 stuff create an IPv6 block any any and don't log. The default block rule logs everything.

Sounds to me like you don't really need VLANs. For your VPN clients you can simply use an alias consisting of a list of IPs to route over the VPN. You wouldn't need a VLAN for wifi either unless you wanted a separate Guest WiFi Network.

Hello guys, sorry it took soo long for me to respond, i hope i still can help someone by writing it down now. So this is how i did it. I created some firewall rules to allow the connections i wanted to pass, and doing so  logged DHCP requests and leases with the timestamps, for questions of readability and/or time saving issues, i forwarded this logs to a remote server using rsyslog, you can do this by enabling remote loging on pfSense. On the rsyslog machine i configured graylog to get inputs from rsyslog and pfSense extractors with regex, to filter out the information i really wanted without the overhead of information, than correlating information and i got what i wanted. NOTE: This is the way i did it, im still a noob so maybe there is some new ways or other ways to do this faster/better. Take care.

It was a misconfiguration of the equipment owned by my ISP. They corrected it and now everything works fine. Thanks for your help!

Boot into single user mode and update the driver by hand, petition the FreeBSD developers to include the driver. Add another NIC to the device, so pfSense does find at least one network interface.

Thanks.. Already posted in the proper forum part.

Thanks jimp, much appreciated! ;D

Everything works absolutely fine after the BIOS downgrade. I am running coreboot 4.0.7.1 now. Uptime 1 day and >6 hours.

At least for their regular DSL Fusion X2 service their 6rd works with pfSense. Just configure the modem to bridge an Ethernet port for pfSense WAN port. Configure pfSense to use the 6rd settings they provide. It's tunneled so it's not as good as native IPv6. You wind up getting a /60. Don't know about their resold uverse or fiber products.

Still trying to get this to work. Using the utility "radtest", I noted that the radius server seem to be just listening on the WAN port of the box, eventhough I configured Freeradius to listen on a LAN port. Anyone? Need more info?

help me please :(

I'm not aware of an plans to do that. It seems unlikely to happen. I think it would need to be significantly more used to consider it to be honest. You should be able to use it as a package though. Steve

Would we still use private LAN addresses? Just to clarify, there are "private" addresses.  There are unique local addresses, which are similar in function to the RFC 1918 addresses in IPv4.  However, they are not normally used for NAT.  There are also link local addresses, which have no equivalent in IPv4.  Every IPv6 capable device has one, usually based on the MAC address.  It's what's used for router addresses.  It's also used for other things that are confined to the local network.  For example, Windows HomeGroup networking uses it.  In fact, it won't even work over IPv4.

Hi sparkman123 I prefer partedMagic (solution for all things I need to do) or kali linux. I rarely stresstest my systems, I often need to test the performance, so openvpn/openssl is good to test the stress as well e.g.: iperf -c IP -t 60 or openssl speed -elapsed -evp aes-256-cbc              [if your CPU/OS supports aes-xyz then you choose some it doesn't so the CPU has to work, not the crypto part alone] As openssl is often preinstalled it's my first choice for seeking CPU limits Cheers Michael

Hi folks again: is there a more expanded or sampled php_shell explanation? Important is the -VLAN creation -assigning VLAN+Naming it -enable DHCP+setting the right suffixes -enable NTP -enable DNS -copy or create FW rule set Cheers Michael