I depends how you have the PCs setup, how locked down they are. You can assign a fixed dhcp lease for each pc based on MAC so that they each always get the same IP address and then create access rules based on IP. However that's trivial to bypass if the computers are not locked down. If they aren't locked down then you can change the MAC anyway. I'm not sure if there's a filter based on cumulative access time. Steve Edit: Doesn't seem like this is in place yet. See: http://forum.pfsense.org/index.php/topic,36435.msg187789.html#msg187789

Kind of what I suspected. I'll try getting hold of a better NIC before I start complaining to the ISP though, just to be sure. Thanks a lot for the help!

Tests on the other boxes could be a TCP tuning issue. What OS is running on the machines behind pfSense? Assuming it is Windows, if you are using Vista/7 you shouldn't need to do anything as it generally does a good job at dynamically adjusting it's settings as needed. XP and older though don't have the dynamically adjusted settings and can benefit from this: http://www.dslreports.com/tweaks and then this: http://www.dslreports.com/drtcp. I know that tool won't work for non-windows OSes but the tweak test is Java based and should run on any OS, of course making the adjustments it recommends would require a skillset I don't have :P

@dmg210: I will post another log with more information next time it drops. Do you mean run a traceroute when the WAN link goes down? No, I don't mean a traceroute because that won't get very far if the link is down. I meant packet capture, for example, pfsense shell command: # tcpdump -i vr0 (replace vr0 by the physical name of your WAN interface) to see what is happening when you expect your WAN link to be recovering.

MAN! USE THE PACKAGE RATE! HE IS PERFECT!!! Use in Status  >  Traffic graph PFSense is the best

Think I found the culprit…. I noticed that the number of processes was steadily increasing over time as well... Turned off NAT reflection, and things seem back to normal. The start of this problem also coincided with my use of Wuala (a great service) which requires UDP port forwards in the ~7000 range to work properly. Hope this helps someone else.  It's worth noting that I experienced the same problem on 2.0RC1 and 1.2.3RELEASE. -Matt

Is it something simple like your PPPoE connection timing out, and turning on keepalives will fix it?

Perry thank you very much.  :D :D :D

I have a similar problem, my bonded pair PPPOE WAN connection drops one line and therefor the connection but PFSense 2 RC 1 (build Tue May 3 10:16:12 EDT 2011) appears not to notice, I have to reboot to get it to authenticate again. This does not happen in version 1.2.3 The Zxyel P-663H-51 modem is in bridged mode. Regards Grant

Ethernet handoffs are the simplest way for any appliance to work with be it pfsense or any other band. It's made even easier because you have a static IP block. You only need 3 things, one IP in the block you were assigned, the subnet mask and the default gateway. Assign that one IP to the WAN port and the rest into the virtual IP section to handle 1-1 mappings of the remaining IPs and away you go.

If this is the case, then you will be doing a double-NAT configuration.  In this scenario, the network segment between the WAN interface of your pfSense box and the ethernet interface of your 2811 should be treated as your WAN network segment.  The down side to this type of configuration is that you cannot allow any inbound services (SMTP, HTTP, etc) without having your provider create port forwards for you on the 2811 and then you repeat the same configuration on your pfSense box.  Your network would then look something like this: Office LAN -> pfSense LAN -> [pfSense box] -> pfSense WAN -> 2811 Ethernet -> [2811 box] -> 2811 Fiber connection -> Internet

@aasimbeck: Would you be able to provide me with some links to what I'm looking for here, and what's the fastest speed possible using that method? For PCI connectivity:  Intel MF Server Adapter (LC connector) or Pro/1000 XF Adapter (SC connector) or Pro/1000 XF Adapter (SC connector) For PCIe connectivity:  Intel PF or EF Server Adapter (Both LC connector) These are all Gigabit NICs.  Your limit would still be Gigabit ethernet.

Hi, please show us your gateway groups (screenshot), your firewall rules on the LAN interfaces. Are you sure, that the firewall rule with "WANS" as Gateway gets hit ? Firewall rules are acting from top to down. Further, if bothe gateways are Tier 1 and one gateway goes down, then there is automatically a failover. If bothe are up, it is loadbalancing. If you are using squid on this box, then loadbalancing doesn't work "out of the box". You need to do some tricks.

http://doc.pfsense.org/index.php/HOWTO_Install_pfSense#Embedded_.28Compact_Flash.29_Installation

@conquerer: Experts Please Reply As soon As Possible. Kindly guide to make server according to requirements. You're asking for a serious amount of help, for free, from people who tend to be very busy.  Do yourself a favor and read the documentation, then learn to be more patient.

@torontob: I thought OPT1 would take it's DHCP from LAN when I do the bridge on OPT1 interface. It will if firewall rules allow the initial DHCP request from OPT1. But that is a necessary condition, it may not be sufficient. What version of pfSense are you using? If you search the forums for keywords DHCP and bridge I expect you will find a number of posts discussing your issue including suitable firewall rules.