Bridge mode?

jeroen234 · Jan 5, 2006, 9:15 AM

both are ignored
and replaced bij the bridge witch now had that ipadress
sof if youre lan card is xl0 and youre wan card is vr0 then you have now br0
voor both lan and wan
any trafic adressed to br0 get's out on the lan and the wan card

Koops · Jan 5, 2006, 11:11 AM

First time pfsense user here. How did you guys actually get it working in bridge mode? From the web gui or the commandline? (something like http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/network-bridging.html ?)

I've found this for monowall ( http://doc.m0n0.ch/handbook/examples-filtered-bridge.html ) but the pages aren't there on the sense webconfigurator.

I mainly want to use pfsense for what appears to be brilliant traffic shaping capabilities.

I'm using the Beta 1 version.

My test home setup is :

pc(192.168.0.19 ) -> crossover to pfs box (192.168.0.9/192.168.0.8) -> switch -> netgear router (192.168.0.1) -> adsl modem.

I've turned off the firewall but I cant seem to find the section to put it into bridge mode.

Ideally I want to figure out how I can set this up so I can deploy them in minutes and stick them between the net connection and the first switch ahla Packeteer packetshaper style. Just without the lighter wallet :)
Then I can later connect to each one and turn the connection as approiprate.

Ideas?

Cheers.

hoba · Jan 5, 2006, 1:26 PM

pfSenses bridge is filtering by default. You have to create rules for traffic to pass the bridge. everything that is not explicitly allowed will be blocked. By turning off firewall you shutdown all filtering which means that nothing is passing the shaper anymore. LKeep the firewall enabled and create allow any to any rules at the interfaces instead.

sullrich · Jan 5, 2006, 9:37 PM

This is no longer true. There is now a checkbox in advanced which enables filtering bridging.

Koops · Jan 6, 2006, 2:48 AM

@sullrich:

This is no longer true. There is now a checkbox in advanced which enables filtering bridging.

Advanced? As in "System" tab then Advanced?

http://img219.imageshack.us/img219/2360/advanced3er.gif

Could you help in pointing out where this is. Is this available on the 1.0 beta? Or is that in a newer developer version?

Can't seem to find that option anyway. I did select "Disable the firewalls filter altogether."

Cheers.

Koops

sullrich · Jan 6, 2006, 3:08 AM

Beta 2.

Koops · Jan 6, 2006, 4:23 AM

@sullrich:

Beta 2.

I'm assuming thats in the cvs tarball? using the cvs is probably a bit beyond me atm.

sullrich · Jan 6, 2006, 4:28 AM

Yes, the fix has not been released, only beta 1 has.

Koops · Jan 6, 2006, 8:23 AM

The penny finally dropped with some help from "trendchiller". Thanks!

Finally found how to bridge the connection (had to grep for "bridge" in all the php scripts). interface_lan.php! :-[

As I had been setting the Lan interface from the console. The connecting to the web interface and it would run the setup wizard I never needed to change the Lan interface as such it was the only page I never looked in!

Oh well, time to finally play around with packet shaping :)

trendchiller · Jan 7, 2006, 8:46 PM

Hi !

What could mean this message, when I try to bridge the LAN IF to the WAN IF ?

Warning: unlink(/var/run/lan.conf.dirty): No such file or directory in /usr/local/www/interfaces_lan.php on line 295

sullrich · Jan 7, 2006, 9:06 PM

This is cosmetic. You can ignore it and it should be fixed in beta2.