Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Hardware purchase advice please

    Scheduled Pinned Locked Moved Hardware
    74 Posts 9 Posters 25.9k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • W
      wallabybob
      last edited by

      @jimmybob:

      Is this some kind of bug?

      No. That is the intended behaviour. DHCP static address assignments must be outside the pool of "dynamic" address assignments.

      Consider this a measure to help reduce the likelihood of duplicate address assignments. If you add a new static assignment within the pool there is no easy way to tell if DHCP is about to assign the same address to a system requesting DHCP configuration.

      1 Reply Last reply Reply Quote 0
      • stephenw10S
        stephenw10 Netgate Administrator
        last edited by

        @jimmybob:

        I guess I would not be able to use 192.168.1.1 since this is used the router and surely would cause issues right?

        Right. You can't use the interface address.

        @jimmybob:

        Also, not sure if you can advise me with this.. was hoping so… I want to use OpenVPN but have it so it only works on specified LAN adapters rather than all.
        Is there a way I can do this?

        Yes. You can put in firewall rules to catch traffic from your selected clients and set the gateway they use as the OpenVPN gateway. You may want to setup a failover group such that they can still connect in the event the VPN goes down.

        Steve

        1 Reply Last reply Reply Quote 0
        • J
          jimmybob
          last edited by

          @stephenw10:

          @jimmybob:

          I guess I would not be able to use 192.168.1.1 since this is used the router and surely would cause issues right?

          Right. You can't use the interface address.

          @jimmybob:

          Also, not sure if you can advise me with this.. was hoping so… I want to use OpenVPN but have it so it only works on specified LAN adapters rather than all.
          Is there a way I can do this?

          Yes. You can put in firewall rules to catch traffic from your selected clients and set the gateway they use as the OpenVPN gateway. You may want to setup a failover group such that they can still connect in the event the VPN goes down.

          Steve

          Thanks.. I'm trying to get IPVanish working now…
          I'm reading this... http://swimminginthought.com/pfsense-routing-traffic-strongvpn-openvpn/
          The part that I find a little concerning is the part at #14 where it says...

          Now go to the the WAN Tab and create the same rule. (Weird,while it doesn’t make sense, if this rule is missing, it didn’t work for me.)

          Does it mean, add a new rule and do..
          Action: pass
          Interface: WAN
          Protocol: any
          Then I need to set the gateway to the VPN Gateway.

          But adding such rule at the WAN is ok?

          1 Reply Last reply Reply Quote 0
          • stephenw10S
            stephenw10 Netgate Administrator
            last edited by

            Hmm, that guide seems too vague for my liking in some areas. You shouldn't have to add that rule to WAN, why is it there? Also the guide says to add an allow any to any from any to the VPN interface but here the VPN interface is acting as your WAN so you have allowed any traffic including any random incoming stuff.  :-
            I would look at some other guides if I was you. There are a few here on the forum.

            Steve

            1 Reply Last reply Reply Quote 0
            • J
              jimmybob
              last edited by

              @stephenw10:

              Hmm, that guide seems too vague for my liking in some areas. You shouldn't have to add that rule to WAN, why is it there? Also the guide says to add an allow any to any from any to the VPN interface but here the VPN interface is acting as your WAN so you have allowed any traffic including any random incoming stuff.  :-
              I would look at some other guides if I was you. There are a few here on the forum.

              Steve

              Thanks steve, that's what I was thinking too.
              It did not make much sense to me.
              I was able to get HideMyAss working without a WAN rule.
              But IPVanish is just having non of it :(

              1 Reply Last reply Reply Quote 0
              • J
                jimmybob
                last edited by

                Still struggling with this.
                http://forum.pfsense.org/index.php/topic,61973.0.html

                A little concerned about locking myself out of the router.
                But this has to be possible?

                1 Reply Last reply Reply Quote 0
                • J
                  jimmybob
                  last edited by

                  Hi Steve,

                  I want to add a 2.5 HDD to use for Squid.

                  What is the best way to add this into the pfSense system so it's seen and can be used?

                  thanks

                  1 Reply Last reply Reply Quote 0
                  • stephenw10S
                    stephenw10 Netgate Administrator
                    last edited by

                    The best and easiest way to do this is to use the HD as the boot media and remove the flash card completely.

                    Whilst it is possible to get the drive to mount automatically at boot and to set Squid to use it for its cache it is not a supported configuration. It would likely be broken by a firmware update.

                    Steve

                    1 Reply Last reply Reply Quote 0
                    • J
                      jimmybob
                      last edited by

                      @stephenw10:

                      The best and easiest way to do this is to use the HD as the boot media and remove the flash card completely.

                      Whilst it is possible to get the drive to mount automatically at boot and to set Squid to use it for its cache it is not a supported configuration. It would likely be broken by a firmware update.

                      Steve

                      Hi Steve,

                      Thanks for your advice.
                      I did manage to find a tutorial after typing this.
                      So I'm going to give it a bash.
                      I do have a 2.5 hd spare, one that come out of a ps3 when I changed the had for a larger size.
                      To prepare the hdd for FreeBSD so the os can use it.
                      What is the best way?
                      I'd be doing this in windows using a usb 2 sata adapter.
                      Is there a windows app that will prep the hd?

                      1 Reply Last reply Reply Quote 0
                      • stephenw10S
                        stephenw10 Netgate Administrator
                        last edited by

                        It's almost certainly easier to format the disk from pfSense directly. I don't think there is any convenient way of writing UFS from Windows. This might help: http://doc.pfsense.org/index.php/Local_Disk_Storage_on_Embedded_%28soekris%29

                        Steve

                        1 Reply Last reply Reply Quote 0
                        • First post
                          Last post
                        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.