• Bridge + trunking in/out + mac learning problem

    Locked
    7
    0 Votes
    7 Posts
    4k Views
    F
    Update for those that might be trying to impliment the same thing i am doing. Essentialy i am trying to put 2 pfsesne boxes between my core routers and my edge switches with backup links going around the firewal for redundancy. I've upgraded my config from beta 2 ta 3. Thank god ftp is fixed that was a huge issue thankx guys. I've upgraded my in and out nics from 100mb to fiber 1gig cards, and changed the config accordingly. After a few hours of troubleshooting loop issues and up down interfaces i finnaly was able to get 4 vlans trunked together across my fiber link passing 4-5 megs with about 15-20 physical machines. Of course like sullrich said, the mac entries are still being broadcasted across all vlans with no fix in sight (might actually look at freebsd code to see if i can make a quick fix) but now i also have the spanning tree packets beign blocked as well. If i shut filtered bridge off all 4 vlans go into stp disabled status for recieving ther other 4 vlan's stp packets.if i enable the filtered bridge all works but not stp packets pass at all.Apparently the bridge does not know after recieving these packets where to send them on the other side. This wouldn't be that much of a problem being the bridge on the firewall itself has stp enabled, but being i want to place this inline with my core and edge switches i can not run a secondary (non firewalled) connection to my switches without creating 2 links on the same vlan in stp forward status (IE loop). Its either one link or the other. So it boils down to this. You can have 2 pfsense boxes on one switch, you can even have them on multible switches with the redundancy u want. But if you run a trunk of more than 2 vlans (1 natvie and 1 non native) across the firewall stp and mac entries will be screwed to high heaven causing extensive cpu load from learning mac entries over and over again(depending on how many machines u have, i got a few hundred) and possible stp loops even when enabled. From what i am seeing on google and freebsd boards, this is a limitation of the kernel and not pfsense so no complaints here, but thought i'd give you guys a heads up. Any suggestions would be apreciated. Anyone curious and want more details about my setup feel free to ask.
  • WRAP.2C + pfSense performance compared to m0n0wall

    Locked
    6
    0 Votes
    6 Posts
    5k Views
    H
    No problems here with ADSL2+ 16mbit/s down,1 mbit/s up  :)
  • Updating config.xml on USB stick via GUI ?

    Locked
    2
    0 Votes
    2 Posts
    2k Views
    H
    Go to diagnostics>edit file. Then open "/conf/config.xml". Edit it, copy, paste or whatever you like and save. If the box has booted up with the configuration on the stick it already is mounted for use.
  • PfSense as a firewall with routables IP behind it

    Locked
    7
    0 Votes
    7 Posts
    4k Views
    K
    Ok, thanks. I'll try a temporary configuration with an unused routable C class to test all this before using it for real. Maybe when I'll be ready for that, the 1.0 final will be out  ;D
  • Install to embedded intel flash chips

    Locked
    2
    0 Votes
    2 Posts
    2k Views
    B
    You might be able to use linux to dd an image direct to the embedded flash although good luck upgrading it afterward - heh.  Hopefully the unit(s) load the OS into a ramdisk after booting, if not, I can't see how you're going to dd over the on disk OS w/out panic'ing it, resulting in an immediate paperweight. If possible, I'd do the following. Boot into linux configure the flash to read-only (better yet, see if you can put the OS in a ram disk and change the / mountpoint to it - good luck) SSH into the machine use ssh to ssh to another unix box passing dd if=pfsense.img of=/dev/whatevertheflashdriveis command to the remote ssh daemon Pray that nothing writes to disk other than the dd, sync; sync; pull powercord - do NOT let the OS hit that disk power on and pray some more If it works, pay me $1000 for the consulting and report back.  If it doesn't work…do the same ;-P --Bill
  • Beta 3: problem with serial console

    Locked
    7
    0 Votes
    7 Posts
    4k Views
    D
    @hoba: Please try to disable serial console at system>advanced, save and turn it on again, save. Then reboot. Does this fix the issue? I tried this on a IP330, it get's to the same point as the other poster said.  I tried what you suggested.  Still getting the same thing.
  • IP330 Install - Beta 3 Questions

    Locked
    1
    0 Votes
    1 Posts
    2k Views
    No one has replied
  • Bug in load balancing in beta3

    Locked
    3
    0 Votes
    3 Posts
    2k Views
    W
    Thanks for your quick responce i wasn't sure if it was a known bug or not. I have gone back to beta2 for the moment will upgrade when the new snapshot comes out.
  • [ WAN pppoe faillure after upgrade]

    Locked
    8
    0 Votes
    8 Posts
    4k Views
    R
    okok, seems to have a problem with the modem.. Btw, pfsens rocks ! thanks to it team for this work :) regards, ronan.
  • Trouble disabling console on pfsense beta3 embedded

    Locked
    4
    0 Votes
    4 Posts
    2k Views
    H
    yeah, I think that's what you want. you can dump your monitor now  ;D
  • Using Installer CD with CF Card

    Locked
    5
    0 Votes
    5 Posts
    3k Views
    E
    Thank You!
  • RELENG_1_SNAPSHOT_04-02-2006

    Locked
    7
    0 Votes
    7 Posts
    4k Views
    S
    I think we are now crossing threads.  Please do not do this.
  • 2 LAN's with pfsense in between and no WAN ?

    Locked
    8
    0 Votes
    8 Posts
    5k Views
    H
    Then make a seperate subnet for the wlan. captive portal can't be enabled at a bridged interface.
  • Soekris, boot partition and baud rate

    Locked
    1
    0 Votes
    1 Posts
    4k Views
    No one has replied
  • Problem to install on miniitx with raisercard and 2gigabit nics

    Locked
    2
    0 Votes
    2 Posts
    2k Views
    H
    At which point does it refuse to start or crash or whatever? What is the last output you get before it stops?
  • Floppy erasement on reboot

    Locked
    7
    0 Votes
    7 Posts
    4k Views
    S
    This used to be a problem with older versions but is no longer an issue with beta2.  Atleast not with usb memory sticks.  I wouldnt trust a floppy as far as I can throw it.
  • Reboot status and file lovations

    Locked
    2
    0 Votes
    2 Posts
    2k Views
    H
    Keep in mind that only thr wrap has 3 LEDs. Other devices like the soekris only have an "error" LED to toogle and this then might confuse a user. Also the Wrap LED is solid green before freebsd actually starts booting. This might also confuse as you can't tell is it hung before trying to boot or is it up and running. But if it can be done like in the following example without breaking something for other platforms that don't have the second LED I would like to have it too: 1st LED is always on (at least for the wrap, indicates Power, you can toogle it but it might confuse due to the above described reasons) 2nd LED is off before BSD starts booting up and switches to blinking state when BSD takes over. It will finally switch to on when it's up (same time when the readybeeps are played)
  • Missing php extension after cvs upgrade

    Locked
    5
    0 Votes
    5 Posts
    2k Views
    D
    @sullrich: Try running it again.  I fixed this a bit ago. Thanks, I have updated again.  I am still on "RELENG_1_SNAPSHOT_03-19-2006" is this correct?
  • Live CD install to Thumb Drive

    Locked
    4
    0 Votes
    4 Posts
    3k Views
    H
    Try the packet mode option. I need to set it for my cf-cards in ide-adaptor too.
  • My *NEW* IDE CF is recognized by FreeBSD-6.0 – Success!

    Locked
    2
    0 Votes
    2 Posts
    3k Views
    S
    _Edit:  I worked on this for two hours last night before posting and going to sleep.  This morning it's working normally again:  local hostnames from DHCP are resolving, lease infromation is being written to /var/dhcpd/var/db/dhcpd.leases, and they show up in the web interface again.  Several reboots last night made no diifference. _ Perhaps I spoke a little too soon.  When I installed from LiveCD, I made sure to not create the swap partition and I read the FAQ about changing /etc/platform to "wrap".  It still did not create a memory file system, everything was mounted RW and it was writing log entries.  I didn't find any of the scripts in /etc to reference PLATFORM of "wrap", so I changed it to "embedded", but that didn't change anything. Having figured out the CF IDE adapter, I decided to just put the BETA2 embedded version on it.  No problem getting it to boot up and work but something's not right with the DHCP/DNS. The web GUI refuses to show any leases any more, though there actually are several.  The local DNS seems intermittent now.  It worked fine with the install from the LiveCD. Some lease information is being written to /var/dhcpd/var/db/dhcpd.leases~ but not to dhcpd.leases.  Note the tilde. Here is output of mount" mount /dev/ufs/pfSense on / (ufs, local, read-only) devfs on /dev (devfs, local) /dev/md0 on /tmp (ufs, local) /dev/md1 on /var (ufs, local) devfs on /var/dhcpd/dev (devfs, local)      <–-- Is this right? /dev/ufs/pfSenseCfg on /cf (ufs, local, read-only)
Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.