Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    3rd and 4th Lan Ports for internet

    Scheduled Pinned Locked Moved Routing and Multi WAN
    24 Posts 5 Posters 2.4k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • J
      jonefc
      last edited by

      Hey

      Sorry maybe i wasnt clear.

      I have 4 ports on my NIC card

      1 = WAN
      1 = LAN
      1 = NOTHING
      1 = NOTHING

      I want the two nothings to be LAN ports to give internet out

      DaddyGoD 1 Reply Last reply Reply Quote 0
      • DaddyGoD
        DaddyGo @jonefc
        last edited by DaddyGo

        @jonefc said in 3rd and 4th Lan Ports for internet:

        I want the two nothings to be LAN ports to give internet out

        Okhay 😉
        I have 8 ports and I use them for different purposes and there is something to spare....

        f.e.: DMZ, VPN, etc

        Configure the blanks (NOTHING) here:

        3da83609-2038-4bc0-901c-e8db29b27eac-image.png

        and here:

        37fa8378-7c21-43de-90b4-9cf850ea6175-image.png

        +++edit:

        https://docs.netgate.com/pfsense/en/latest/interfaces/configure.html

        Cats bury it so they can't see it!
        (You know what I mean if you have a cat)

        1 Reply Last reply Reply Quote 0
        • J
          jonefc
          last edited by

          I really dont know what the hell im doing wrong. Let me show with images !

          So just to explain again

          I have 4 ports on my NIC card

          1 = WAN
          1 = LAN
          1 = NOTHING
          1 = NOTHING

          I want the two nothings to be LAN ports to give internet out. As well as the first LAN port (so 3 outbound internets)

          My interfaces are as follows ;

          7276b068-b773-481c-90b6-deb1a6cced11-image.png

          Within the LAN it is -

          88389fc9-2c0b-4bcd-a1c9-7763d6219a13-image.png

          and both interface OPT1 and OPT2 are as follows ;

          4db6bbcd-a210-46be-8eb5-5097c015ec11-image.png

          A bridge is created

          ac590ec7-f4cd-493a-b814-1e285afb8e4f-image.png

          AND FIREWALL ON BOTH OPT1 and OPT2 are as follows;

          47b53787-d232-46e8-8f43-d12339f12ded-image.png

          I have tried connecting the ethernet cable from LAN to OPT1 and OPT2 and get no internet. Any ideas?

          I am totally stuck.

          1 Reply Last reply Reply Quote 1
          • J
            jonefc
            last edited by

            any ideas anyone?

            P DaddyGoD 2 Replies Last reply Reply Quote 0
            • P
              pete35 @jonefc
              last edited by pete35

              @jonefc

              You may discard the Bridge and then you need to give the OPT1 and OPT2 Interfaces a Static IP and configure a DHCP Server for each.

              If you really want to bridge OPT1 and OPT2, assign the bridge to an new Interface and enable it, create a rule for it.

              https://docs.netgate.com/manuals/pfsense/en/latest/the-pfsense-documentation.pdf page 448

              <a href="https://carsonlam.ca">bintang88</a>
              <a href="https://carsonlam.ca">slot88</a>

              1 Reply Last reply Reply Quote 0
              • J
                jonefc
                last edited by

                ok so i know how to give them IP.

                How do i configure a DHCP server for each?

                1 Reply Last reply Reply Quote 0
                • GertjanG
                  Gertjan
                  last edited by Gertjan

                  Visit Services > DHCP Server

                  "LAN" will be selected, and you see that you have 2 other interface names, typically OPT1 and OPT2.
                  Click on OPT1, and set up a range, like 192.168.2.2 - 192.168.2.254 if 192.168.2.1 is the pfSense OPT1 base address.

                  Idem for OPT2, 192.168.3.2 - 192.168.3.254 if 192.168.3.1 is base.

                  Don't forget to hit Save.

                  And be carefull : the LAN interface has a default pass all firewall rule.
                  The OPT1 and OPT2 have no rules - DHCP will work ;) but nothing else.
                  Copy the default LAN rule to OPT and OPT2 and you are ready to use both interfaces.

                  No "help me" PM's please. Use the forum, the community will thank you.
                  Edit : and where are the logs ??

                  1 Reply Last reply Reply Quote 1
                  • DaddyGoD
                    DaddyGo @jonefc
                    last edited by DaddyGo

                    @jonefc said in 3rd and 4th Lan Ports for internet:

                    any ideas anyone?

                    Note: It would be a smart thing to keep one of the interfaces just to manage (Mng. interface) your pfSense box,
                    and set special rules to keep the bad guys don’t have access to your important things

                    Cats bury it so they can't see it!
                    (You know what I mean if you have a cat)

                    1 Reply Last reply Reply Quote 0
                    • J
                      jonefc
                      last edited by

                      Thanks for your help there.

                      I thought i had cracked it but no internet on either OPT1 and OPT2.

                      Have a look at these settings ..

                      fa9e5411-1f70-4fb5-aebc-f3236bbe855d-image.png

                      THIS IS THE SAME FOR OPT2 BUT THE IP ADDRESS IS 192.168.3.1

                      THIS IS THE LAN DCHP SERVER

                      348c733a-4e13-45b7-abef-74fcfd44a4d5-image.png

                      AND NOW OPT1 and OPT 2

                      661a9578-e8fc-4693-9d47-692a3175cb2e-image.png

                      OPT 2 IS Range 192.168.3.10 > 192.168.3.245

                      Firewall rules for both OPT1 and OPT2 are below

                      0237aa58-6fc7-4660-a900-b375e942a0f8-image.png

                      AHHH !

                      DaddyGoD 1 Reply Last reply Reply Quote 0
                      • DaddyGoD
                        DaddyGo @jonefc
                        last edited by

                        @jonefc

                        Just copy the default LAN rule with the red arrow icon and apply it to OPT1 and 2

                        1e4b62c1-e262-46ac-b9cf-444f304caa86-image.png

                        Do not forget....

                        OPT1 and OPT2 Net!!!!! (in my example DMZ net)

                        95ba825e-0a58-48be-9f72-060072bf3569-image.png

                        Cats bury it so they can't see it!
                        (You know what I mean if you have a cat)

                        1 Reply Last reply Reply Quote 0
                        • GertjanG
                          Gertjan
                          last edited by Gertjan

                          When you (think you) finished the setup of OPT1 :
                          Connect the cable of a device - typically, a PC.

                          Use the

                          ipconfig /all
                          

                          command to check if the IP, mask, gateway and DNS are ok.

                          The gateway and DNS should be the IP of pfSense, the interface you are connected to.
                          The IP should be in the pool of that interface.

                          Also, check on pfSense, Status > System Logs > DHCP and look for the MAC of your device you connected to the OPT interface. The same IP - the 'lease' is shown there .

                          The firewall rules you shwoed, one for IPv4 and one for IPv6 are ok.
                          IPv6 are needed only needed if you actually need and set up IPv6 .

                          No "help me" PM's please. Use the forum, the community will thank you.
                          Edit : and where are the logs ??

                          1 Reply Last reply Reply Quote 0
                          • J
                            jonefc
                            last edited by

                            done everything above, and still no luck !

                            Any ideas. I copied the firewall profile as shown below.

                            6a03c475-04f2-4cf5-aa65-6afddc5c5d14-image.png

                            DaddyGoD 2 Replies Last reply Reply Quote 0
                            • J
                              jonefc
                              last edited by

                              i get nothing on the other connections using IPCONFIG

                              fc1caef1-bd78-4e41-9da4-92aab9ca2cac-image.png

                              1 Reply Last reply Reply Quote 0
                              • P
                                pete35
                                last edited by

                                pls show the rules for opt1 and opt2, and the dhcp server for opt1 and opt2. There should be a rule " IP4 * allow any to any" in opt1 and opt2 and a running dhcp server on both interfaces.

                                <a href="https://carsonlam.ca">bintang88</a>
                                <a href="https://carsonlam.ca">slot88</a>

                                1 Reply Last reply Reply Quote 0
                                • johnpozJ
                                  johnpoz LAYER 8 Global Moderator
                                  last edited by

                                  Well your never going to get anywhere with a 169.254 address. Clearly you device did not get an IP from dhcp server.

                                  An intelligent man is sometimes forced to be drunk to spend time with his fools
                                  If you get confused: Listen to the Music Play
                                  Please don't Chat/PM me for help, unless mod related
                                  SG-4860 24.11 | Lab VMs 2.8, 24.11

                                  1 Reply Last reply Reply Quote 0
                                  • DaddyGoD
                                    DaddyGo @jonefc
                                    last edited by DaddyGo

                                    @jonefc said in 3rd and 4th Lan Ports for internet:

                                    I copied the firewall profile as shown below.

                                    the copy must be apply / validated on OPT1 and OPT2, not under the LAN interface

                                    +++edit:
                                    the firewall sets the "default allow rule" to LAN only by default

                                    Cats bury it so they can't see it!
                                    (You know what I mean if you have a cat)

                                    1 Reply Last reply Reply Quote 0
                                    • johnpozJ
                                      johnpoz LAYER 8 Global Moderator
                                      last edited by

                                      While true he needs firewall rules on optX interfaces to allow internet access from them.

                                      Step 1 in his problem is whatever client that was on whatever optX network is not getting IP from dhcp server.

                                      You need to validate dhcp server is enabled on your optX interface, and the client that is set for dhcp is actually connected to this optX network..

                                      Either directly into the interface on your pfsense box, or a switch that is only connected to this optX network and your clients you want on this optX network.

                                      You can not plug lan and optX networks into some dumb switch and hope to run multiple L2 networks on it and for dhcp to just magically know which client should get what IP from which dhcp server.

                                      An intelligent man is sometimes forced to be drunk to spend time with his fools
                                      If you get confused: Listen to the Music Play
                                      Please don't Chat/PM me for help, unless mod related
                                      SG-4860 24.11 | Lab VMs 2.8, 24.11

                                      DaddyGoD 1 Reply Last reply Reply Quote 0
                                      • DaddyGoD
                                        DaddyGo @johnpoz
                                        last edited by DaddyGo

                                        @johnpoz

                                        In principle, the OP configured a DHCP server somewhere for OPT1, but it failed....?!? (shown above)...hmmm

                                        192.168.2.0.....if I see it right

                                        so there are several problems here

                                        +++edit:
                                        I suggested him / her read the handbook first, because these are very basic steps, what will happen later?

                                        Cats bury it so they can't see it!
                                        (You know what I mean if you have a cat)

                                        1 Reply Last reply Reply Quote 0
                                        • johnpozJ
                                          johnpoz LAYER 8 Global Moderator
                                          last edited by johnpoz

                                          Yeah failed why? He never stated where he has that device plugged in. Maybe it connected it to opt2 and only enabled dhcp on opt1?

                                          But clearly the optput of ipconfig shown did not get an IP from dhcp server. 169.254 isn't going anywhere that is a APIPA address when a dhcp client doesn't get an IP from a dhcp server.

                                          An intelligent man is sometimes forced to be drunk to spend time with his fools
                                          If you get confused: Listen to the Music Play
                                          Please don't Chat/PM me for help, unless mod related
                                          SG-4860 24.11 | Lab VMs 2.8, 24.11

                                          DaddyGoD 1 Reply Last reply Reply Quote 0
                                          • DaddyGoD
                                            DaddyGo @johnpoz
                                            last edited by

                                            @johnpoz said in 3rd and 4th Lan Ports for internet:

                                            169.254 isn't going anywhere

                                            this is true....

                                            he wants both interfaces, (OPT1 / OPT2), but none succeed

                                            Cats bury it so they can't see it!
                                            (You know what I mean if you have a cat)

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.