DHCPs assign wrong pools

hoba

Basically if you bridge another interface to LAN the clients on this one should receive dhcp from the same server configured at LAN interface. Also check settings at system>advanced. If the filtering bridge is enabled there (this is an option of the newer versions of pfsense) you have to create pass rules at the bridged interface too. For the older versions you always needed the pass rules as the bridge was filtering by default but you should always be at the latest version.

alexus

aint working…
here is what i did
1. reset to defults
2. skipped VLANs setup
3. set the interfaces (LAN -> sis0, WAN -> sis1, opt1 - > sis2)
4. skiped wizard
5. in OPT1 selected bridge with LAN, and Enabled the interface
6. add firewall rule to pass anything from any and to any (all stars)
7. Pluged in to OPT1 released current ipaddress
8. renewed IP address on OPT1, got no DHCP reply....

(I also chekd bridge filtering and it is not cheked)
So? Did i do something wrong or thas the OS that dont like me?

sullrich

try bridging lan -> opt1 instead of the reverse of that.

alexus

no tryed
LAN <-> OPT1
and
LAN -> OPT1

neither of rhem are working….
Did any one got it to work? Why wouldnt u do it as ussually like StarOS has it, you craate the bridge and then assign mac addreses to it and everything works perfectly,,,, but here im going crazy.... whats a point of the router if it doesnt brige the interfaces?

sullrich

Yes it works fine, I have a bridge running here at my home.

Never seen StarOS, didn't know that we where required as developers to copy cat other software…

alexus

um… why it doesnt work here then... are u running EMbedded version?

PS: no u dont have to copy, but its all the same anyway... most of the opensorse modules...

sullrich

@alexus:

um… why it doesnt work here then... are u running EMbedded version?

Not sure, as I said before it works fine here. In fact I just fired up another box and tested it with wireless bridge. Works fine.

@alexus:

PS: no u dont have to copy, but its all the same anyway… most of the opensorse modules...

Not quite. BSD and Linux are completely different animals.

alexus

lets keep the linux VS bsd discusion for other forum post…

what version do you have on your wrap box?
also do u know thw command to see the bridging tabls for if_bridge?

sullrich

@alexus:

lets keep the linux VS bsd discusion for other forum post…

Then don't proclaim that everything is the same. It is not.

@alexus:

what version do you have on your wrap box?

Who said I have a wrap? I have 10+ boxes all of which are on the latest version from http://www.pfsense.com/~sullrich/BETA2-BUGVALIDATION5/

@alexus:

also do u know thw command to see the bridging tabls for if_bridge?

ifconfig

alexus

looks strange too me then… ifconfig sais that the bridge0 is there and is between sis0 and sis2 so it should work i think...

do you know how I can check the bridge functionality in command prompt?

sullrich

Show the contents of ifconfig

Have you rebooted the firewall by chance? How about the client?

alexus

i havent reboot any oh them… getting ipconfig now

sullrich

Try rebooting.

For some reason my iMac will not obtain an IP until I reboot. I really don't know why this is the case and frankly I'm not interested in chasing it down since its such an easy remedy.

alexus

here is ifconfig… and im rebooting in meanwhile...

ath0: flags=8802 <broadcast,simplex,multicast>mtu 1500
	ether 00:80:c8:17:e9:da
	media: IEEE 802.11 Wireless Ethernet autoselect
	status: no carrier
	ssid "" channel 1
	authmode OPEN privacy OFF txpowmax 100 protmode CTS burst
sis0: flags=8943 <up,broadcast,running,promisc,simplex,multicast>mtu 1500
	options=8 <vlan_mtu>inet6 fe80::20d:b9ff:fe02:5a08%sis0 prefixlen 64 scopeid 0x2 
	inet 192.168.1.1 netmask 0xffffff00 broadcast 192.168.1.255
	ether 00:0d:b9:02:5a:08
	media: Ethernet autoselect (100baseTX <full-duplex>)
	status: active
sis1: flags=8843 <up,broadcast,running,simplex,multicast>mtu 1500
	options=8 <vlan_mtu>inet6 fe80::20d:b9ff:fe02:5a09%sis1 prefixlen 64 scopeid 0x3 
	inet 192.168.0.101 netmask 0xffffff00 broadcast 192.168.0.255
	ether 00:0d:b9:02:5a:09
	media: Ethernet autoselect (100baseTX <full-duplex>)
	status: active
sis2: flags=8943 <up,broadcast,running,promisc,simplex,multicast>mtu 1500
	options=8 <vlan_mtu>inet6 fe80::20d:b9ff:fe02:5a0a%sis2 prefixlen 64 scopeid 0x4 
	inet 192.168.1.2 netmask 0xffffff00 broadcast 192.168.1.255
	ether 00:0d:b9:02:5a:0a
	media: Ethernet autoselect (none)
	status: no carrier
pfsync0: flags=41 <up,running>mtu 2020
	pfsync: syncdev: lo0 maxupd: 128
pflog0: flags=100 <promisc>mtu 33208
lo0: flags=8048 <loopback,running,multicast>mtu 16384
	inet6 ::1 prefixlen 128 
	inet6 fe80::1%lo0 prefixlen 64 scopeid 0x7 
bridge0: flags=8043 <up,broadcast,running,multicast>mtu 1500
	ether ac:de:48:21:1a:75
	priority 32768 hellotime 2 fwddelay 15 maxage 20
	member: sis0 flags=7 <learning,discover,stp>port 2 priority 128 path cost 55 forwarding
	member: sis2 flags=7 <learning,discover,stp>port 4 priority 128 path cost 55 disabled</learning,discover,stp></learning,discover,stp></up,broadcast,running,multicast></loopback,running,multicast></promisc></up,running></vlan_mtu></up,broadcast,running,promisc,simplex,multicast></full-duplex></vlan_mtu></up,broadcast,running,simplex,multicast></full-duplex></vlan_mtu></up,broadcast,running,promisc,simplex,multicast></broadcast,simplex,multicast>

sullrich

member: sis2 flags=7 <learning,discover,stp>port 4 priority 128 path cost 55 disabled

It's disabled. It won't forward. You have a ethernet loop?</learning,discover,stp>

alexus

i rebooted aint working… and u know that before me lol

what do u mean by loop?

sullrich

It appears you are creating an ethernet loop by plugging the bridged segment into the same switch, etc.

If one of the members of the bridge is disabled then either the above is true or you don't have a cable plugged into the port.

alexus

yea, i got only one cable unluged… dont tell me that the i need to have 2 cables in in order for the bridge to work?

alexus

if that is the case then how do i make it to work that i can have 2 independant ports so that i can use eather one of them to be routed to the WAN port? Also if I want to route WLAN to WAN with one IP pool then i have to have LAN cable pluged in? That doesnt make any sense…

sullrich

If all you want is access to the internet from etiher interface simply setup a seperate subnet for each interface and setup DHCP Server.

I've never heard of a 2-way bridge where only one port is plugged in – whats the point?!