Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Bridge mode?

    Scheduled Pinned Locked Moved Routing and Multi WAN
    22 Posts 7 Posters 13.8k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • C
      carboncopy
      last edited by

      Anyone using pfsense in a bridge configuration?

      1 Reply Last reply Reply Quote 0
      • C
        cmb
        last edited by

        yes, at least several people out there running bridging setups.

        1 Reply Last reply Reply Quote 0
        • C
          carboncopy
          last edited by

          Ah yes I am running in bridged mode I just wondered if anyone else was.  I have run into a few problems in bridged mode, but overall it seems to be working ok.  The main problem is for some strange reason at times the firewall rules seem to block all traffic, even though my rules are set to pass in/out all.  My config does have 3 nic's in the box, one of them is the admin interface, so maybe pfsense is having some problems with the admin interface?  Or. maybe it is the QoS rules freaking out?  Anyone else having any issues in bridge mode?  The theory was to create a transparent filtering/QoS device that would easily integrate into the network w/o the need to config new ip addresses.  It basically worked, but as I stated it has a few issues.

          Thanks!

          BTW, love the new msg board!!

          1 Reply Last reply Reply Quote 0
          • T
            trendchiller
            last edited by

            I have Intel NICs (fxp0-5) and try to establish a bridge. It works without any problems until I restart the firewall.

            After reboot, the bridge exists, but the traffic does not flow.

            After disabling the bridge and after that re establishing a bridge over two interfaces it works again, but only when reenabling it manually…

            WHY ?

            Thats really annoying

            1 Reply Last reply Reply Quote 0
            • S
              sullrich
              last edited by

              @trendchiller:

              I have Intel NICs (fxp0-5) and try to establish a bridge. It works without any problems until I restart the firewall.

              After reboot, the bridge exists, but the traffic does not flow.

              After disabling the bridge and after that re establishing a bridge over two interfaces it works again, but only when reenabling it manually…

              WHY ?

              Thats really annoying

              What version?  ALWAYS include this information, we are not mind readers.

              After reboot post the contents of running ifconfig from a shell.

              1 Reply Last reply Reply Quote 0
              • T
                trendchiller
                last edited by

                It's the latest version 0.94.12

                I tried it with another mainboard and the same symptoms are there… even in virtual pc these issues come up... :-(

                1 Reply Last reply Reply Quote 0
                • S
                  sullrich
                  last edited by

                  @trendchiller:

                  It's the latest version 0.94.12

                  I tried it with another mainboard and the same symptoms are there… even in virtual pc these issues come up... :-(

                  What about the ifconfig output?!

                  1 Reply Last reply Reply Quote 0
                  • T
                    trendchiller
                    last edited by

                    ifconfig output follows tomorrow…

                    tried the same with 2 diffenent nics (3Com 905TX-M) and the problem was the same...

                    but there another phenomenon was there: with acpi enabled they got IPs but there was no traffic possible... after disabling acpi it worked... but then: reboot system and no traffic was possible anymore... -> seems it has nothing to do with tne nics or their drivers...

                    seems as if there is a problem with soft-reboot in bridge mode...

                    I'll have a look at the ifocnfig output tomorrow...

                    but after a reboot the bridge still exists with its members...

                    ???

                    perhaps anyone has some explainations how to configure a bridge mode... perhaps i'm just still wrong !?

                    Could it be that this occurs because i assigned a static ip (eg. 172.16.0.1) to the wan interface (but disabled the block private networks option) ?

                    1 Reply Last reply Reply Quote 0
                    • C
                      carboncopy
                      last edited by

                      @trendchiller:

                      ifconfig output follows tomorrow…

                      tried the same with 2 diffenent nics (3Com 905TX-M) and the problem was the same...

                      but there another phenomenon was there: with acpi enabled they got IPs but there was no traffic possible... after disabling acpi it worked... but then: reboot system and no traffic was possible anymore... -> seems it has nothing to do with tne nics or their drivers...

                      seems as if there is a problem with soft-reboot in bridge mode...

                      I'll have a look at the ifocnfig output tomorrow...

                      but after a reboot the bridge still exists with its members...

                      ???

                      perhaps anyone has some explainations how to configure a bridge mode... perhaps i'm just still wrong !?

                      Could it be that this occurs because i assigned a static ip (eg. 172.16.0.1) to the wan interface (but disabled the block private networks option) ?

                      Just for the sake of testing… if you can get console access, go to the command line and type pfctl -F all.  Then see if you can pass traffic.  My guess is that it is a PF issue and not a hardware/software problem.

                      CC

                      1 Reply Last reply Reply Quote 0
                      • T
                        trendchiller
                        last edited by

                        Hi all !

                        The problem has been solved when using v1.0 beta !

                        Good work guys !

                        keep on !

                        1 Reply Last reply Reply Quote 0
                        • T
                          trendchiller
                          last edited by

                          Hi all !

                          When I bridge the LAN with the WAN interface and set the IP Adresses at both interfaces to the same IP it works without any problems.
                          Now the question is: which interface IP is ignored ?

                          Because when both IPs would count there jmust be an error, right ?

                          1 Reply Last reply Reply Quote 0
                          • J
                            jeroen234
                            last edited by

                            both are ignored
                            and replaced bij the bridge witch now had that ipadress
                            sof if youre lan card is xl0 and youre wan card is vr0 then you have now br0
                            voor both lan and wan
                            any trafic adressed to br0 get's out on the lan and the wan card

                            1 Reply Last reply Reply Quote 0
                            • K
                              Koops
                              last edited by

                              First time pfsense user here. How did you guys actually get it working in bridge mode? From the web gui or the commandline? (something like http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/network-bridging.html ?)

                              I've found this for monowall ( http://doc.m0n0.ch/handbook/examples-filtered-bridge.html ) but the pages aren't there on the sense webconfigurator.

                              I mainly want to use pfsense for what appears to be brilliant traffic shaping capabilities.

                              I'm using the Beta 1 version.

                              My test home setup is :

                              pc(192.168.0.19 ) -> crossover to pfs box  (192.168.0.9/192.168.0.8) -> switch -> netgear router (192.168.0.1) -> adsl modem.

                              I've turned off the firewall but I cant seem to find the section to put it into bridge mode.

                              Ideally I want to figure out how I can set this up so I can deploy them in minutes and stick them between the net connection and the first switch ahla Packeteer packetshaper style. Just without the lighter wallet :)
                              Then I can later connect to each one and turn the connection as approiprate.

                              Ideas?

                              Cheers.

                              1 Reply Last reply Reply Quote 0
                              • H
                                hoba
                                last edited by

                                pfSenses bridge is filtering by default. You have to create rules for traffic to pass the bridge. everything that is not explicitly allowed will be blocked. By turning off firewall you shutdown all filtering which means that nothing is passing the shaper anymore. LKeep the firewall enabled and create allow any to any rules at the interfaces instead.

                                1 Reply Last reply Reply Quote 0
                                • S
                                  sullrich
                                  last edited by

                                  This is no longer true.  There is now a checkbox in advanced which enables filtering bridging.

                                  1 Reply Last reply Reply Quote 0
                                  • K
                                    Koops
                                    last edited by

                                    @sullrich:

                                    This is no longer true.  There is now a checkbox in advanced which enables filtering bridging.

                                    Advanced? As in "System" tab then Advanced?

                                    http://img219.imageshack.us/img219/2360/advanced3er.gif

                                    Could you help in pointing out where this is. Is this available on the 1.0 beta? Or is that in a newer developer version?

                                    Can't seem to find that option anyway. I did select "Disable the firewalls filter altogether."

                                    Cheers.

                                    Koops

                                    1 Reply Last reply Reply Quote 0
                                    • S
                                      sullrich
                                      last edited by

                                      Beta 2.

                                      1 Reply Last reply Reply Quote 0
                                      • K
                                        Koops
                                        last edited by

                                        @sullrich:

                                        Beta 2.

                                        I'm assuming thats in the cvs tarball? using the cvs is probably a bit beyond me atm.

                                        1 Reply Last reply Reply Quote 0
                                        • S
                                          sullrich
                                          last edited by

                                          Yes, the fix has not been released, only beta 1 has.

                                          1 Reply Last reply Reply Quote 0
                                          • K
                                            Koops
                                            last edited by

                                            The penny finally dropped with some help from "trendchiller". Thanks!

                                            Finally found how to bridge the connection (had to grep for "bridge" in all the php scripts).  interface_lan.php!  :-[

                                            As I had been setting the Lan interface from the console. The connecting to the web interface and it would run the setup wizard I never needed to change the Lan interface as such it was the only page I never looked in!

                                            Oh well, time to finally play around with packet shaping :)

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.