Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Recommendations for my pfsense setup with 5 nics

    Scheduled Pinned Locked Moved General pfSense Questions
    58 Posts 5 Posters 9.0k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • bingo600B
      bingo600 @Teke
      last edited by bingo600

      @teke
      That would also work ...

      Do you still have DHCP default GW issues on the PC ?

      If you find my answer useful - Please give the post a šŸ‘ - "thumbs up"

      pfSense+ 23.05.1 (ZFS)

      QOTOM-Q355G4 Quad Lan.
      CPUĀ  : Core i5 5250U, Ram : 8GB Kingston DDR3LV 1600
      LANĀ  : 4 x Intel 211, DiskĀ  : 240G SAMSUNG MZ7L3240HCHQ SSD

      T 2 Replies Last reply Reply Quote 0
      • T
        Teke @bingo600
        last edited by

        @bingo600
        I have that but ping can't flow between a PC on the Lan and a laptop on the OPT2 network. I've been trying different configs the last 3 days but can't seem to make things work. I would have things working from OPT1 and 2 (ping wise) but I couldn't ping from LAN to OPT1/2. I can play with the firewall rules tomorrow when I'm back to work.

        I also thought that my switch ports had to be trunked with the corresponding vlans as well. If I don't need that it make things easier.

        1 Reply Last reply Reply Quote 0
        • T
          Teke @bingo600
          last edited by

          @bingo600

          Do you still have DHCP default GW issues on the PC ?
          I do. It grabs an IP but the gateway is blank. I was wondering if it is supposed to grab it from the WAN, which is not plugged in.

          bingo600B J 2 Replies Last reply Reply Quote 0
          • bingo600B
            bingo600 @Teke
            last edited by

            @teke
            Without def-gw set , the PC's would only be able to ping on their own Lan/Vlan.
            Not even OPT2

            Do you use pfSense as DHCP server ???

            @stephenw10
            Would pfSense DHCP server NOT send out def-gw, if WAN isn't connected ??

            If you find my answer useful - Please give the post a šŸ‘ - "thumbs up"

            pfSense+ 23.05.1 (ZFS)

            QOTOM-Q355G4 Quad Lan.
            CPUĀ  : Core i5 5250U, Ram : 8GB Kingston DDR3LV 1600
            LANĀ  : 4 x Intel 211, DiskĀ  : 240G SAMSUNG MZ7L3240HCHQ SSD

            T 1 Reply Last reply Reply Quote 0
            • J
              Jarhead @Teke
              last edited by

              @teke
              The DHCP server has nothing to do with the WAN.

              Post screenshots of pfSense config's. All interfaces, all firewall rules.

              Chances are this is a switch problem so if you can, connect the laptop and a pc directly to the pfSense interfaces and test from there to prove it.

              T 1 Reply Last reply Reply Quote 1
              • T
                Teke @bingo600
                last edited by

                @bingo600
                I read a bunch of how to's and watch a few videos on how to set this up and they all say not to put in a default gateway even though I know that you need one to route. I was thinking this was because I have no WAN connected yet??

                I do use pfSense for the DHCP server.
                Should I set the gateway up on each interface DHCP scope?

                johnpozJ J 2 Replies Last reply Reply Quote 0
                • T
                  Teke @Jarhead
                  last edited by

                  @jarhead said in Recommendations for my pfsense setup with 5 nics:

                  @teke
                  The DHCP server has nothing to do with the WAN.

                  Post screenshots of pfSense config's. All interfaces, all firewall rules.
                  I will post shortly.

                  Chances are this is a switch problem so if you can, connect the laptop and a pc directly to the pfSense interfaces and test from there to prove it.
                  I have 2 laptops connected directly to the pfSense box.
                  Laptop 1 plugged into Lan
                  Laptop 2 plugged into OPT2
                  They both get an IP but they can't ping each other.

                  J 1 Reply Last reply Reply Quote 0
                  • johnpozJ
                    johnpoz LAYER 8 Global Moderator @Teke
                    last edited by johnpoz

                    @teke said in Recommendations for my pfsense setup with 5 nics:

                    Should I set the gateway up on each interface DHCP scope?

                    You don't need to do this - by default pfsense hands out its IP on the dhcp interface as the gateway.

                    gateway.jpg

                    But if client has no gateway, then no it wouldn't be able to talk to other networks/vlans on pfsense or the internet

                    defaultgw.jpg

                    Your saying when you look at the client that got an IP (from your dhcp) not some 169.254 address? It has no gateway?

                    An intelligent man is sometimes forced to be drunk to spend time with his fools
                    If you get confused: Listen to the Music Play
                    Please don't Chat/PM me for help, unless mod related
                    SG-4860 24.11 | Lab VMs 2.8, 24.11

                    1 Reply Last reply Reply Quote 0
                    • J
                      Jarhead @Teke
                      last edited by

                      @teke said in Recommendations for my pfsense setup with 5 nics:

                      @bingo600
                      I read a bunch of how to's and watch a few videos on how to set this up and they all say not to put in a default gateway even though I know that you need one to route. I was thinking this was because I have no WAN connected yet??

                      Where exactly are you referring to about the gateway?
                      If you're talking about the LAN interface, then no, don't put one in.
                      Are you talking about the switch??

                      1 Reply Last reply Reply Quote 0
                      • J
                        Jarhead @Teke
                        last edited by

                        @teke said in Recommendations for my pfsense setup with 5 nics:

                        @jarhead said in Recommendations for my pfsense setup with 5 nics:

                        @teke
                        The DHCP server has nothing to do with the WAN.

                        Post screenshots of pfSense config's. All interfaces, all firewall rules.
                        I will post shortly.

                        Chances are this is a switch problem so if you can, connect the laptop and a pc directly to the pfSense interfaces and test from there to prove it.
                        I have 2 laptops connected directly to the pfSense box.
                        Laptop 1 plugged into Lan
                        Laptop 2 plugged into OPT2
                        They both get an IP but they can't ping each other.

                        Show pics of your rules as I asked earlier.
                        Show the ipconfig of the laptops.

                        T 1 Reply Last reply Reply Quote 0
                        • jimpJ jimp moved this topic from Problems Installing or Upgrading pfSense Software on
                        • T
                          Teke @Jarhead
                          last edited by

                          @jarhead
                          I've reinstalled pfSense just incase I messed something up.
                          During the install I choose my WAN (RE0)
                          I also manually chose my LAN as BCE0
                          I then added all OPT ports
                          LAN has the default 192.168.1.1/24 as the IP address.
                          When running ipconfig on my windows box this is what I get.defaultIPConfig.JPG

                          No Gateway. Is this supposed to have a gateway right after install?

                          I really appreciate all of the help so far. I just don't know this product yet but I'm getting a crash course.

                          johnpozJ J 2 Replies Last reply Reply Quote 0
                          • johnpozJ
                            johnpoz LAYER 8 Global Moderator @Teke
                            last edited by

                            @teke yeah it should be handing out the gateway out of the box for the lan interface you enabled dhcp on.. So unless you put in "none" in the box I posted above.

                            If me I would do a sniff of the dhcp, and look to see if the dhcp server handed that out..

                            You can do a sniff (packet capture) under diagnostic menu.. Pick you lan interface and port 67, this will capture dhcp traffic.

                            You can then see what the client is asking for - and what the dhcp server returned..

                            example

                            dhcp.jpg

                            See in the discover the client asked for router (gateway)... Then in the offer the router (pfsense IP on this interface) was offered.

                            An intelligent man is sometimes forced to be drunk to spend time with his fools
                            If you get confused: Listen to the Music Play
                            Please don't Chat/PM me for help, unless mod related
                            SG-4860 24.11 | Lab VMs 2.8, 24.11

                            1 Reply Last reply Reply Quote 0
                            • J
                              Jarhead @Teke
                              last edited by Jarhead

                              Are you sure that's not a static IP on that pc?
                              Missing a lot of info.
                              dhcp.png

                              johnpozJ 1 Reply Last reply Reply Quote 0
                              • johnpozJ
                                johnpoz LAYER 8 Global Moderator @Jarhead
                                last edited by johnpoz

                                @jarhead said in Recommendations for my pfsense setup with 5 nics:

                                Are you sure that's not a static IP on that pc?

                                That could explain it ;)

                                @Teke could you post your ipconfig /all

                                This would show if client is dhcp or not..

                                An intelligent man is sometimes forced to be drunk to spend time with his fools
                                If you get confused: Listen to the Music Play
                                Please don't Chat/PM me for help, unless mod related
                                SG-4860 24.11 | Lab VMs 2.8, 24.11

                                T 1 Reply Last reply Reply Quote 0
                                • T
                                  Teke @johnpoz
                                  last edited by

                                  @johnpoz @Jarhead
                                  The nic is not static.
                                  ipconfigall.JPG

                                  Here is the packet trace from the webgui.
                                  0.0.0.0 is my switch with no ip associated with it.
                                  DHCPPacket.JPG

                                  I know the issue is that when during setup it is not setting up that default gateway but I have no idea how to fix that.

                                  johnpozJ J 2 Replies Last reply Reply Quote 0
                                  • johnpozJ
                                    johnpoz LAYER 8 Global Moderator @Teke
                                    last edited by

                                    @teke said in Recommendations for my pfsense setup with 5 nics:

                                    I know the issue is that when during setup it is not setting up that default gateway

                                    There is nothing to setup for a gateway on your lan. As I showed you - pfsense will use its IP address in the dhcp server is running on as the gateway. You need to open that dhcp sniff in your fav analyzer, say wireshark.

                                    Use the download button in the packet capture. either post that pcap here so we can look at the details in it, or open it up on your pc with say wireshark..

                                    An intelligent man is sometimes forced to be drunk to spend time with his fools
                                    If you get confused: Listen to the Music Play
                                    Please don't Chat/PM me for help, unless mod related
                                    SG-4860 24.11 | Lab VMs 2.8, 24.11

                                    1 Reply Last reply Reply Quote 0
                                    • J
                                      Jarhead @Teke
                                      last edited by

                                      @teke said in Recommendations for my pfsense setup with 5 nics:

                                      @johnpoz @Jarhead
                                      The nic is not static.
                                      ipconfigall.JPG

                                      It's also not on your LAN.
                                      Is that the same pc you used on the LAN interface?

                                      johnpozJ T 2 Replies Last reply Reply Quote 0
                                      • johnpozJ
                                        johnpoz LAYER 8 Global Moderator @Jarhead
                                        last edited by

                                        @jarhead said in Recommendations for my pfsense setup with 5 nics:

                                        Is that the same pc you used on the LAN interface?

                                        I was wondering about that as well the 192.168.1 vs 192.168.10 addresses

                                        An intelligent man is sometimes forced to be drunk to spend time with his fools
                                        If you get confused: Listen to the Music Play
                                        Please don't Chat/PM me for help, unless mod related
                                        SG-4860 24.11 | Lab VMs 2.8, 24.11

                                        T 1 Reply Last reply Reply Quote 0
                                        • T
                                          Teke @johnpoz
                                          last edited by

                                          @johnpoz @Jarhead
                                          I've completely redid the install.
                                          Lan is 192.168.10.0

                                          I hope this is the wireshark info that you are looking for.TekeDump.pcap

                                          johnpozJ 1 Reply Last reply Reply Quote 0
                                          • T
                                            Teke @Jarhead
                                            last edited by

                                            @jarhead said in Recommendations for my pfsense setup with 5 nics:

                                            @teke said in Recommendations for my pfsense setup with 5 nics:

                                            @johnpoz @Jarhead
                                            The nic is not static.
                                            ipconfigall.JPG

                                            It's also not on your LAN.
                                            Is that the same pc you used on the LAN interface?
                                            I was just showing you that once I reinstalled pfsense that when I did a ipconfig from my PC it wasn't grabbing a gateway.

                                            T 1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.