Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Help making opt1 on Alix board a second lan

    Scheduled Pinned Locked Moved General pfSense Questions
    10 Posts 5 Posters 1.3k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • P
      porkenstein
      last edited by

      I want to make opt1 a second lan but not having much luck so far. First thing I did was was assign opt1 and enabled leaving ipv4 setting at none. Next step I created a bridge between lan and opt1 and then I went to firewall, rules, lan, and and selected pass and opt1. Hope that makes sense. I followed this guide http://www.cyberciti.biz/faq/how-to-pfsense-configure-network-interface-as-a-bridge-network-switch/  but still can not get wan over opt1. Must be missing something simple. :(

      screenshot.jpg
      screenshot.jpg_thumb

      1 Reply Last reply Reply Quote 0
      • D
        dreamslacker
        last edited by

        Go to Firewall -> Rules -> OPT1.

        Add a default allow any any rule there.

        1 Reply Last reply Reply Quote 0
        • P
          porkenstein
          last edited by

          Actually I thought I had that rule. Here is what I have in the below screen shot. but no connection to opt1 still

          firewall.jpg
          firewall.jpg_thumb

          1 Reply Last reply Reply Quote 0
          • P
            porkenstein
            last edited by

            Any other ideas?

            1 Reply Last reply Reply Quote 0
            • K
              kpa
              last edited by

              How are you testing connectivity? You do know that any host on OPT1 should use the same IP subnet, gateway and DNS settings as the LAN hosts since you're bridging the two?

              1 Reply Last reply Reply Quote 0
              • jahonixJ
                jahonix
                last edited by

                Why do you want to do that? A bridge is NOT a replacement for a switch, not even the cheapest $5 device.

                I created some bridges years ago with LAN and WLAN interfaces.
                Just activate the host interfaces and leave them alone.
                Create a bridge from LAN_IF and OPT1_IF
                Activate it, assign it an IP, configure DHCP server, etc.

                At  System: Advanced: System Tunables

                |   net.link.bridge.pfil_member | Set to 0 to disable filtering on the incoming and outgoing member interfaces. | default (1) |
                |   net.link.bridge.pfil_bridge | Set to 1 to enable filtering on the bridge interface. | default (0) |

                you may want to change the default settings

                Or buy a $5  5-port switch.

                1 Reply Last reply Reply Quote 0
                • jahonixJ
                  jahonix
                  last edited by

                  Ah, and make sure all bridge member interfaces have an active link. One interface down may brake/disable the bridge.
                  Did I mention that this won't happen on a $5 switch?  ;)

                  1 Reply Last reply Reply Quote 0
                  • P
                    porkenstein
                    last edited by

                    Ok I will just use a switch. I was looking at the Alix box as a router with one wan and 2 lans. Just thought that was what the opt1 port was for.

                    1 Reply Last reply Reply Quote 0
                    • D
                      dreamslacker
                      last edited by

                      @porkenstein:

                      Any other ideas?

                      Do you have any floating rules?

                      1 Reply Last reply Reply Quote 0
                      • A
                        AppleDash48
                        last edited by

                        Yes, this is very possible. At current, I have it enabled on my box. One wan (plugged into the motherboard) and two lans (using a dual port NIC)

                        What I did was:

                        1.) Go to "Interfaces / OPT1"
                        2.) Set IPv4 config type as "Static IPv4" Leave everything else alone in that section
                        3.) Scroll down a little and give opt1 a static IP. Something like 192.168.2.1
                        4.) Leave both of the boxes in "Reserved networks" unchecked
                        5.) Click save

                        6.) Go to "Services / DHCP Server /
                        7.) Click "OPT1"
                        8.) Check "Enable" under "General Options"
                        9.) Change the range to "(From) 192.168.2.2" "(To) 192.168.2.254"

                        Now, plug in your OPT1 to your pc or something, and you're good to go. (at least you should be)

                        [EDIT]
                        (also, make sure you have the "allow all traffic" rule enabled in OPT1. You can customize it to your liking, but this is just to be sure that it works.)

                        1 Reply Last reply Reply Quote 0
                        • First post
                          Last post
                        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.