Why so hard to get pfsense to works?

lmh1

Hi i normaly use Asus\netgear as ruter, but try to use PFsense to see if it works better, but i have lot of issue to get Ipv6 and connect to web to works, its look like it get disconected, so what is needed to get internet to works?

Why did pfsense dont have browser? Or GUI? its have be better if it give examples of ip adress or why its not works? Should it works with Mellanox ConnectX-2?

johnpoz

Its not... You pretty much turn it on - follow the bouncing ball and your up in running like 2 minutes tops..

Without details of what issue your specifically having.. Its impossible to help you..

Maybe you have better luck if you ask your questions in your native language section?
https://docs.netgate.com/pfsense/en/latest/install/installing-pfsense.html

lmh1

I get ip adress, but how to check internet from Pfsense? its look like its have issue to get update?
Because from client (windows 10\linux) i get limited or no connection to internet.

Its a way to start GUI based boot?
Why is not UEFI added?

*** Welcome to pfSense 2.4.4-RELEASE (amd64) on pfSense ***
 WAN (wan)       -> em0        -> v4/DHCP4: 172.21.16.38/24
 WAN (lan)       -> em1        -> v4: 192.168.1.1/24

 0) Logout (SSH only)                  9) pfTop
 1) Assign Interfaces                 10) Filter Logs
 2) Set interface(s) IP address       11) Restart webConfigurator
 3) Reset webConfigurator password    12) PHP shell + pfSense tools
 4) Reset to factory defaults         13) Update from console
 5) Reboot system                     14) Disable Secure Shell (sshd)
 6) Halt system                       15) Restore recent configuration
 7) Ping host                         16) Restart PHP-FPM
 8) Shell

Enter an option:

I also get like this one, but how to check if internet works from pfsense?

NogBadTheBad

Then from a prompt ping 8.8.8.8

Type exit to get back to the menu

Can you ping 192.168.1.1 from the pc ?

lmh1

@NogBadTheBad

Yes i get connection to pfsense router menu, but not internet, get issue with ping also, no reply.
So how did you point from one card to other? Bridge connection or port forward?

NogBadTheBad

"WAN (wan) -> em0 -> v4/DHCP4: 172.21.16.38/24"

Errr what is your pfSense router connected to upstream?

lmh1

Its other switch, that is connected to a modem.
Ip adress is not correct, its only a example, but its on other range. more like example 80.99.99.1
I have issue with ipv6 also, on my router its do this by self but pfsense did i need to select ipv6 adress, its hard, because if i select wrong its did not works.

NogBadTheBad

If you connect a PC to the switch the other side of the pfsense router do you have internet access ?

lmh1

@NogBadTheBad no i get DNS_PROBE_FINISHED_NO_INTERNET

But i have access to go to 192.168.1.1 so ping works.

NogBadTheBad

@lmh1 said in Why so hard to get pfsense to works?:

DNS_PROBE_FINISHED_NO_INTERNET

~~From the router is DNS resolving ?~~

~~Type in host google.com~~

Actually ignore that you said a ping to 8.8.8.8 fails.

Derelict

Did you completely restart whatever this "modem" is?

lmh1

Yes, its also works with firmware updates, its say is not pfsense update available.
so its most be connection from one card to other that is the issue.

Derelict

Anyway, as has been said, pfSense works out-of-the-box with a DHCP WAN and 192.168.1.1/24 on LAN with a DHCP server. It requires no special configuration.

Can you ping whatever DHCP is giving you as the default gateway from the firewall?

lmh1

i found out that reset to factory default works. So that fix it.

But how safe is pfsense with lastest update compared with merlin build or other asus\netgear router?
If pfsense more safe or not? how did you find networks attack?

stephenw10

It's as safe as you configure it to be.

By default it blocks all incoming connections and allows all outgoing connections. That's what most firewalls do. pfSense is safer, IMO, than most soho devices as it does not have UPnP enabled by default. I've never used a Merlin firmware so I couldn't tell you about that.

Steve

lmh1

But did Pfsense have 4g mobile hotswop?
Because i find it hard to add camera, printer download manager, devices list, its may possible to get it, but still hard to find it?

Is it possible to add wireless (Mainboard) e.g asrock Fatal1ty X470 Gaming-ITX/ac.
because i use asus ac66u now as wireless accesspoint.

Gertjan

Hi,

I understood this part :
@lmh1 said in Why so hard to get pfsense to works?:

because i use asus ac66u now as wireless accesspoint.

I'm using myself several AP's to host the Captive portal, using by my clients.

But this :
@lmh1 said in Why so hard to get pfsense to works?:

But did Pfsense have 4g mobile hotswop?
Because i find it hard to add camera, printer download manager, devices list, its may possible to get it, but still hard to find it?
Is it possible to add wireless (Mainboard) e.g asrock Fatal1ty X470 Gaming-ITX/ac.

I'll reply upfront : no, there is no coffee-machine option neither, and yes, you can use it to launch nukes.

pfSense is a firewall/router. Not a download manager.
It might accept some Wireless support, but you'll be much better of with external AP's.
Check first if your "Fatal1ty X470 Gaming-ITX/ac" runs fine using FreeBSD (== hardware recognized).

I guess you do understand that pfSense doesn't really want a "gamer mobo".

What is a hotswop ? A 4G USB dongle ? => Stay away from those. Check out the numerous questions on the forum about USB NIC's . As always, check first if FreeBSD supports them natively. If so, you might have a chance they will work with pfSense.

lmh1

example: Nighthawk M1 Mobile Hotspot
But its cost a lot, and i did need router if i have pfsense.

But witch hardware did you use? https://www.gigabyte.com/Server-Motherboard/MA10-ST0-rev-11#ov is this the best mainboard for users? did not know cores\vs high cpu speed? what is needed for 10 gigabit ethernet VPN server with much load?

johnpoz

@lmh1 said in Why so hard to get pfsense to works?:

i did need router if i have pfsense.

Huh? Pfsense is a router.. You would need a modem to change whatever your isp transports the connection over to ethernet sure...

That M1 is whole bunch of stuff in one.. Shit the thing even runs on its own battery for 24 hours.. So no its not going to be freaking 10 bucks.. It can connect to LTE (cellular) network and then provide wifi to clients, etc.. You can charge your phones off its internal battery.. It will stream media you connect to, etc.. Its meant as a travel router - you take it with you on trips, etc. business or pleasure.. Then can provide all your devices internet over wifi with LTE connection for example... So yeah such a device comes with a price tag.

Your ISP normally will provide the "modem" as part of your plan.. Or you can buy your own so you don't get a monthly charge, etc.

But if what your asking for is how to add wifi to your network behind pfsense - then any freaking $20 old wifi router can do that.. Any!!! Or you could get a real AccessPoint for a few bucks more..

As to that MB... That is WAY over the top for a router/firewall... Normal builds you see people using are in the $200-300 range total... Maybe something like the sg-1100 would be good start for you... If your looking for pfsense box.. But pretty much it could run on any old pc hardware you having laying around if your budget is tight.

https://store.netgate.com/pfSense/SG-1100.aspx
$159 USD

Shoot you can even run pfsense on a VM on the PC your using now if you really wanted to and don't have money for hardware.

lmh1

But some accesspoint is useless old one, so its not easy to use internal wifi card to it? I guess its possible, but did not know support of it if it use other than intel.
Linux\unix support is very good.