Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Ways to manage devices on network

    General pfSense Questions
    6
    30
    2.8k
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • johnpozJ
      johnpoz LAYER 8 Global Moderator
      last edited by johnpoz

      Those all seem to be wireless devices.. What are you using for wireless now? Your old asus router as just an AP?

      I do the same sort of thing for clients in my wifi controller.. But I also just assign most of my devices dhcp reservations so they always have the same IP.. Not like your harmony hub is going somewhere ;) I used that as example as I have one myself..

      devices.png

      So while its a pain when you have a lot of devices, its one time thing.. Then your done an you then know that your phone is always going to have IP 1.2.3.4, and then makes it much easier to do firewall rules as well ;)

      As to bandwidth, sure couple different packages you could use - darkstat, bandwidthd, iptraf, lots of ways to determine who is using up banwidth.. If your just looking for who right this second is using up the bandwidth, the traffic graph can show you that.

      An intelligent man is sometimes forced to be drunk to spend time with his fools
      If you get confused: Listen to the Music Play
      Please don't Chat/PM me for help, unless mod related
      SG-4860 24.11 | Lab VMs 2.7.2, 24.11

      1 Reply Last reply Reply Quote 0
      • KOMK
        KOM
        last edited by KOM

        @cheapie408 Alrighty then. Scratch The Dude. Thanks for the tip.

        1 Reply Last reply Reply Quote 0
        • C
          cheapie408
          last edited by cheapie408

          for WiFi i'm using a Unifi AP as primarly but the ASUS router also have WiFi enabled. I need it in the garage to extend the signal to a few devices in front of the house where the Unifi AP doesn't get to. I just don't like that I have to fire up the Unifi software each time I want to log in and spending $100 on a cloud key just doesn't feel right when the PFSense box only cost me about that. The way it is now, I basically have 3 difference places to go to in order to acheive a signal task. :(

          PFSense only display those that are on the DHCP table. Static IP devices doesn't pop up here. Printers comes to mine for this. I exported my client list yesterday so I can do exactly what you suggested, the long and painful manual way.

          1 Reply Last reply Reply Quote 0
          • johnpozJ
            johnpoz LAYER 8 Global Moderator
            last edited by johnpoz

            If your doing static IP on the devices directly you just causing yourself extra work.. Just set them to dhcp and create a reservation.. My printer is like that, all my devices are like that.. I don't have anything set static - they all just have reservations.

            The only thing that that doesn't have a reservation would be guest devices that I don't give 2 shits about, say when friends and family come over and want to connect their phone to the wifi.. But if they come over all the time - like my son, his phone has a reservation.. So I can setup firewall rules for his device if need too, etc.

            And if I do setup something static - I would just create a dns entry for it.

            My controller just runs as VM on my NAS.. no reason to buy a cloud key ;) But the software should be running 24/7 so you can actually get useful info out of it ;)

            You can for sure look in the arp table of pfsense for device it has recently talked too... But if some device only wakes up every few hours do something.. For example my nest protect doesn't do anything on the network for hours, then wakes up to check in, and then offline again.. So yeah unlikely to that sort of device in a arp cache table.

            Sounds more like your concern is with just asset/ip management than monitoring.. There is a big difference between wifi AP and router... An AP has to know, because there has to be an active wifi connection... But router connected to a switch.. Unless something talks to it - how would it know about some device on your network.

            You can for sure look in the dhcp leases for anything pfsense had handed out a lease too, even if the device is not currently on, etc. If your using your old asus as AP device they would get dhcp from pfsense.. Maybe you have it setup as Nat router? still vs actually AP..

            Setting static on devices, even something like a nas is pain in the but.. What if you want to change something - like the actual network space being used maybe you want to change from 192.168.1/24 to 172.16.100/24, or maybe you have a new ns you want to point clients, or multiple other things that can be handed out via dhcp options. Pretty much only thing that needs to be static on your network is the device running dhdpd ;)

            An intelligent man is sometimes forced to be drunk to spend time with his fools
            If you get confused: Listen to the Music Play
            Please don't Chat/PM me for help, unless mod related
            SG-4860 24.11 | Lab VMs 2.7.2, 24.11

            1 Reply Last reply Reply Quote 0
            • C
              cheapie408
              last edited by cheapie408

              Holy batman... I just spent the last 3 hours of my life adding static reservation to over 60 something devices on my network. I don't know if I should be proud that I'm so well connected? 😉

              Lets hope I don't have to do this again.

              BTW: By keeping the Asus router alive, I can still use its interface to look at stuff as I used to. I guess there's a plus to that.

              KOMK 1 Reply Last reply Reply Quote 0
              • KOMK
                KOM @cheapie408
                last edited by

                @cheapie408 said in Ways to manage devices on network:

                Lets hope I don't have to do this again.

                Make sure you make a config.xml backup and you won't.

                1 Reply Last reply Reply Quote 0
                • johnpozJ
                  johnpoz LAYER 8 Global Moderator
                  last edited by

                  Seems like a long time.. If they were all dhcp already it would of been as simple as add reservation on their current lease and just changing the ip to be outside your scope.. Should of gone a lot faster than 3 hours ;)

                  But yeah should only be a 1 time thing, and sure backup of your config is ALWAYS a good idea.

                  An intelligent man is sometimes forced to be drunk to spend time with his fools
                  If you get confused: Listen to the Music Play
                  Please don't Chat/PM me for help, unless mod related
                  SG-4860 24.11 | Lab VMs 2.7.2, 24.11

                  C 1 Reply Last reply Reply Quote 0
                  • C
                    cheapie408 @johnpoz
                    last edited by cheapie408

                    I'm very OCD with the range I give my device.

                    IE: All networking related stuff IE, Switches, Routers, AP etc... would be between 1 to 10, all IOT devices would be 11-40, IP Cameras would have it's own range. I think this through before selecting a range and ensure to leave enough room for growth of that group so I don't overlap into the next group. Devices like the Neteworking gear would not grow very big so they get a small range, others like Random Client WiFi device would get a larger range etc..

                    Especially IOT and Cameras, this help me remember the IP per device so I don't always have to go look for it or when I'm adding a new device, I can just assign the address quickly.

                    Similarly my Switch ports and patch panels have to be in certain ways and order.

                    DerelictD 1 Reply Last reply Reply Quote 0
                    • johnpozJ
                      johnpoz LAYER 8 Global Moderator
                      last edited by johnpoz

                      well I am with not shot gunning switch ports, vlans should be next to each other, etc.. But what IP a device has doesn't really matter once you have dns for it, ie after you setup your reservation.. But sure ok that will make it take longer ;)

                      edit: if you don't mind spending a bit of money.. The domotz is pretty slick for managing/monitoring a network. I used it for a few years until just couldn't justify the cost.. Its not all that bad, but it was only 30$ a year and has gone to 60 now.. And I have trimmed down the amount of devices on my network as well..

                      If you don't use vlans you could prob get away with their fingbox more user version vs pro version which is domotz.

                      An intelligent man is sometimes forced to be drunk to spend time with his fools
                      If you get confused: Listen to the Music Play
                      Please don't Chat/PM me for help, unless mod related
                      SG-4860 24.11 | Lab VMs 2.7.2, 24.11

                      1 Reply Last reply Reply Quote 0
                      • DerelictD
                        Derelict LAYER 8 Netgate @cheapie408
                        last edited by

                        @cheapie408 said in Ways to manage devices on network:

                        IE: All networking related stuff IE, Switches, Routers, AP etc... would be between 1 to 10, all IOT devices would be 11-40, IP Cameras would have it's own range.

                        Makes more sense to do that in CIDRs not decimal ranges.

                        Chattanooga, Tennessee, USA
                        A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                        DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                        Do Not Chat For Help! NO_WAN_EGRESS(TM)

                        1 Reply Last reply Reply Quote 0
                        • First post
                          Last post
                        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.