Lab VM pfsense bridge CPU Usage 100%

davidhs

Hello everyone, I am a beginner regarding Pfsense.

I am setting up a laboratory to have pfsense in Multi-WAN HA, I have achieved this part successfully, for the LAN part I would like to have redundancy in the interfaces, that is to say right now I have WAN1, WAN2, LAN1 and LAN2. I already have the HA mounted with respect to the WAN input, but to have redundancy in the LAN, when I bridge between LAN1 and LAN2 to assign an IP to it, the pfsense CPU reaches 100% and blocks the machine.

I have been stuck on this for days, if someone throws me some information I would be grateful, even if they mention any ideas regarding how to have redundancy regarding the network interfaces for the LAN.

A greeting.

kiokoman

bridge? i don't like the sound of it .. bridge usually is not the solution
can you make a draw of how you configured the network?
https://docs.netgate.com/pfsense/en/latest/bridges/interoperability.html#high-availability
https://docs.netgate.com/pfsense/en/latest/bridges/index.html#bridging-and-layer-2-loops

stephenw10

Yeah, I don't think you want a bridge there. You have probably created a loop.

You probably want a LAGG connection to a suitable switch.
https://docs.netgate.com/pfsense/en/latest/interfaces/lagg.html

Steve

SteveITS

Or even a second router seems better than days of effort, and one will have continuous uptime during pfSense updates also:
https://docs.netgate.com/pfsense/en/latest/highavailability/index.html
https://docs.netgate.com/pfsense/en/latest/recipes/high-availability-multi-wan.html

Note the interface names have to be the same in order to sync states.
https://docs.netgate.com/pfsense/en/latest/highavailability/pfsync.html#pfsync-and-physical-interfaces