Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    What should i do??

    Scheduled Pinned Locked Moved Firewalling
    17 Posts 3 Posters 5.7k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • E Offline
      Eugene
      last edited by

      Iamthed, may I ask you about what position you have at this company please?
      Just out of curiosity…
      Thanks.

      http://ru.doc.pfsense.org

      1 Reply Last reply Reply Quote 0
      • Cry HavokC Offline
        Cry Havok
        last edited by

        To be blunt, can I strongly suggest you hire a professional who understands networking.  It's pretty obvious that you're very far out of your depth.

        If you want to carry on then:

        1. Use a default install of pfSense
        2. Connect the WAN interface to the Cisco switch
          2a) If you're not using DHCP, manually configure the IP, netmask, default gateway and DNS servers correctly
          2b) Ensure that the LAN interface uses a different IP range to the WAN interface
        3. Confirm that your pfSense host can perform DNS queries and reach the Internet
        4. Connect your test PC to the LAN interface
        5. Configure the firewall rules on the LAN interface to match your business needs

        When that works and you can access the Internet from the test PC:

        1. Configure the OPT1 interface with an appropriate IP range, different from that in use on the WAN and LAN
        2. Configure appropriate firewall rules to allow your chosen traffic through
        3. Connect the Wireless subnet to the OPT1 interface
        1 Reply Last reply Reply Quote 0
        • I Offline
          iamthed
          last edited by

          @Eugene:

          Iamthed, may I ask you about what position you have at this company please?
          Just out of curiosity…
          Thanks.

          i'm just a new network engineer in my company.. why do you ask?

          i'm dumb.. but i have a desire to learn

          1 Reply Last reply Reply Quote 0
          • E Offline
            Eugene
            last edited by

            @iamthed:

            @Eugene:

            Iamthed, may I ask you about what position you have at this company please?
            Just out of curiosity…
            Thanks.

            i'm just a new network engineer in my company.. why do you ask?

            As I said - out of curiosity… Thanks for your answer.
            Network engineer... Hmm... and why did you decide to redesign your network? What is wrong with it you think?

            http://ru.doc.pfsense.org

            1 Reply Last reply Reply Quote 0
            • I Offline
              iamthed
              last edited by

              actually i'm not redesign it.. but i'm improving it.. since the router act as a router+firewall.. it has a bad effect of QoS.. so i'm thinking to split the firewall and router.. because PFsense very low cost why i didn't changing it to improve my QoS..

              are u a fan of PFsense? why u don't tell me the good and bad sides of PFsense..
              since i'm new using PFsense

              i'm dumb.. but i have a desire to learn

              1 Reply Last reply Reply Quote 0
              • I Offline
                iamthed
                last edited by

                @cry havok
                i already setup PFsense like ur suggestion but i have a trouble with the bridge LAN interface and WAN interface
                see the picture above..
                it's listening not established.. i'm gettin frustated !!

                the topology is like this

                my PC –--- Interface LAN(bridge to WAN) ----- WAN( where is the bridge option?) ------ switch ---- router
                LAN interface can ping to google
                but WAN interface can't ping to anywhere
                can u fix it? tq

                interface.JPG
                interface.JPG_thumb

                i'm dumb.. but i have a desire to learn

                1 Reply Last reply Reply Quote 0
                • Cry HavokC Offline
                  Cry Havok
                  last edited by

                  Why are you bridging?  Why aren't you using routing?

                  1 Reply Last reply Reply Quote 0
                  • I Offline
                    iamthed
                    last edited by

                    because i think bridging is the simpilest method..
                    ok let put some routing in pfsense..
                    is static or RIP do u suggest for routing like this?

                    i'm dumb.. but i have a desire to learn

                    1 Reply Last reply Reply Quote 0
                    • Cry HavokC Offline
                      Cry Havok
                      last edited by

                      I think the amount of problems you're having to get the basics working should have told you by now that if you don't know what you're doing bridging isn't the simplest method ;)

                      I've already provided my advice earlier in this thread, and I'll quote it here for you:

                      @Cry:

                      1. Use a default install of pfSense
                      2. Connect the WAN interface to the Cisco switch
                        2a) If you're not using DHCP, manually configure the IP, netmask, default gateway and DNS servers correctly
                        2b) Ensure that the LAN interface uses a different IP range to the WAN interface
                      3. Confirm that your pfSense host can perform DNS queries and reach the Internet
                      4. Connect your test PC to the LAN interface
                      5. Configure the firewall rules on the LAN interface to match your business needs

                      When that works and you can access the Internet from the test PC:

                      1. Configure the OPT1 interface with an appropriate IP range, different from that in use on the WAN and LAN
                      2. Configure appropriate firewall rules to allow your chosen traffic through
                      3. Connect the Wireless subnet to the OPT1 interface

                      So, yes, static routing - one single entry for the default gateway (on the WAN interface).  Stop trying to run when you haven't even learned to crawl yet.  I'd also suggest you talk with the experienced network techs in your company.

                      1 Reply Last reply Reply Quote 0
                      • I Offline
                        iamthed
                        last edited by

                        thx again to cry havok..
                        i'm not using static route.. because the pfsense crash after i using static route
                        then i'm using bridge.. and it works now..
                        lol

                        however thx cry havok.. regards

                        i'm dumb.. but i have a desire to learn

                        1 Reply Last reply Reply Quote 0
                        • First post
                          Last post
                        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.