Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Pfsense 8200 capable config?

    Routing and Multi WAN
    1
    1
    229
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • H
      hispeed
      last edited by

      I want to use the Netgate 8200 direct attached to my ISP and with a 10 Gbic module. They recommend using a Mikrotik router instead. They also do "support" if you want to use your own device.

      So this is the Mikrotik configuration. I think it shouldn't be a problem for Pfsense?

      /interface bridge
      add name=lan
      add name=wan protocol-mode=none
      /interface ethernet
      set [ find default-name=sfp28-2 ] fec-mode=fec91
      set [ find default-name=sfp-sfpplus1 ] auto-negotiation=yes
      /ip pool
      add name=dhcp_pool0 ranges=192.168.100.2-192.168.100.254
      /ip dhcp-server
      add address-pool=dhcp_pool0 disabled=no interface=lan name=dhcp1
      /ipv6 dhcp-server
      add address-pool=v6pool interface=lan name=v6server
      /interface bridge port
      add bridge=lan interface=sfp28-1
      add bridge=wan interface=sfp28-2
      add bridge=lan interface=sfp-sfpplus1
      add bridge=lan interface=sfp-sfpplus2
      add bridge=lan interface=sfp-sfpplus3
      add bridge=lan interface=sfp-sfpplus4
      add bridge=lan interface=sfp-sfpplus5
      add bridge=lan interface=sfp-sfpplus6
      add bridge=lan interface=sfp-sfpplus7
      add bridge=lan interface=sfp-sfpplus8
      add bridge=lan interface=sfp-sfpplus9
      add bridge=lan interface=sfp-sfpplus10
      add bridge=lan interface=sfp-sfpplus11
      add bridge=lan interface=sfp-sfpplus12
      add bridge=lan interface=ether1
      /ipv6 settings
      set accept-router-advertisements=yes
      /ip address
      add address=192.168.88.1/24 comment=defconf interface=ether1 network=192.168.88.0
      add address=192.168.100.1/24 interface=lan network=192.168.100.0
      /ip dhcp-client
      add disabled=no interface=wan
      /ip dhcp-server network
      add address=192.168.100.0/24 gateway=192.168.100.1
      /ip firewall filter
      add action=accept chain=input in-interface=ether1
      add action=fasttrack-connection chain=forward
      /ip firewall nat
      add action=masquerade chain=srcnat out-interface=wan
      /ip service
      set telnet address=192.168.100.0/24
      set ftp address=192.168.100.0/24
      set www address=192.168.100.0/24
      set ssh address=192.168.100.0/24
      set www-ssl address=192.168.100.0/24 disabled=no
      set api address=192.168.100.0/24
      set winbox address=192.168.100.0/24
      set api-ssl address=192.168.100.0/24
      /ipv6 address
      add from-pool=v6pool interface=lan
      /ipv6 dhcp-client
      add add-default-route=yes interface=wan pool-name=v6pool pool-prefix-length=56 request=address,prefix
      /ipv6 firewall filter
      add action=accept chain=forward connection-state=established,related in-interface=wan out-interface=lan
      add action=drop chain=forward in-interface=wan out-interface=lan
      /ipv6 nd
      set [ find default=yes ] interface=lan managed-address-configuration=yes mtu=1500 other-configuration=yes
      /system clock
      set time-zone-name=Europe/Zurich
      /system package update
      set channel=testing
      /system resource irq rps
      set ether1 disabled=yes
      
      1 Reply Last reply Reply Quote 0
      • First post
        Last post
      Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.