Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    New to pfSense, and need advice on configuration settings.

    Scheduled Pinned Locked Moved General pfSense Questions
    16 Posts 4 Posters 3.0k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • stephenw10S
      stephenw10 Netgate Administrator
      last edited by

      The correct way to do this, if you need this sort of uptime, is to use a pair of pfSense boxes in a CARP setup.
      https://doc.pfsense.org/index.php/Configuring_pfSense_Hardware_Redundancy_(CARP)
      That's probably beyond what you're looking for!

      It is possible to do what you're describing by using a LAN-bypass NIC. The NIC has two Ethernet ports that usually appear as two separate interfaces to pfSense but if the power fails the ports connect together bypassing the pfSense box. It can also be configured to go into bypass mode if the OS crashes using a watchdog timer but that requires some interaction with the OS.
      Generally speaking bypass cards are more trouble than they're worth. If you search the forum you'll just find people trying to disable the by-pass mode.

      Steve

      1 Reply Last reply Reply Quote 0
      • F
        flipflop1970
        last edited by

        Hmmm, maybe I will just leave as is, and manually reconnect the wan, doesn't seem worth the hassle lol.
        Oh well, now it's time for me start thinking about firewall rules… see how many hurdles I have to jump this time haha

        Just want to say a big thanks for your prompt replies, your information has been very helpful  ;)

        1 Reply Last reply Reply Quote 0
        • F
          flipflop1970
          last edited by

          I was just re-reading this thread, and noticed this question that you asked me:

          @stephenw10:

          Is your WAN using PPPoE from the pfSense box?

          Steve

          Sorry, I don't know how I missed it  :-[

          Anyhow, no, the WAN is using DHCP as I was under the impression that this is the protocol used by talktalk. If anybody can prove me wrong please let me know. However, I have not had any issues so far.

          1 Reply Last reply Reply Quote 0
          • DerelictD
            Derelict LAYER 8 Netgate
            last edited by

            If the two choices are DHCP and PPPoE and one side is incorrect the link won't come up at all.

            Chattanooga, Tennessee, USA
            A comprehensive network diagram is worth 10,000 words and 15 conference calls.
            DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
            Do Not Chat For Help! NO_WAN_EGRESS(TM)

            1 Reply Last reply Reply Quote 0
            • stephenw10S
              stephenw10 Netgate Administrator
              last edited by

              It was the wrong question anyway. What I should have asked was, does your pfSense WAN interface have a public IP? In other words is your modem acting as just a modem or is it routing and NATing which is much less desirable.

              Steve

              1 Reply Last reply Reply Quote 0
              • F
                flipflop1970
                last edited by

                Hi Steve,

                In all honesty, I don't know, how would I find this out?

                Thanks

                1 Reply Last reply Reply Quote 0
                • DerelictD
                  Derelict LAYER 8 Netgate
                  last edited by

                  Look at the IPv4 address for WAN in status->interfaces.  Go to a web page like www.wimi.com.  Are the addresses the same?

                  Chattanooga, Tennessee, USA
                  A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                  DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                  Do Not Chat For Help! NO_WAN_EGRESS(TM)

                  1 Reply Last reply Reply Quote 0
                  • F
                    flipflop1970
                    last edited by

                    @Derelict:

                    Look at the IPv4 address for WAN in status->interfaces.  Go to a web page like www.wimi.com.  Are the addresses the same?

                    Yes, the addresses do match.

                    1 Reply Last reply Reply Quote 0
                    • stephenw10S
                      stephenw10 Netgate Administrator
                      last edited by

                      That's fine then. I was originally asking because it may have conflicted with the LAN subnet but that's not the case.

                      Steve

                      1 Reply Last reply Reply Quote 0
                      • F
                        flipflop1970
                        last edited by

                        That's great, thanks guys  ;)

                        1 Reply Last reply Reply Quote 0
                        • First post
                          Last post
                        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.