Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Doing it all on same subnet?

    Scheduled Pinned Locked Moved General pfSense Questions
    10 Posts 6 Posters 3.1k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • T
      T J
      last edited by

      Hello,
      I have been experimenting with PFSense and really enjoy the features.
      I have one DSL modem/router (to use as DSL only) with ip 192.168.2.1
      I have an older box with PFSense and three nics (one for DSL from modem, one for SBS 2003 and one for client XP Pro).
      I have one Small Business Server 2003 with one nic and 192.168.2.subnet.
      I have one client PC with XP Pro using SBS server as primary DNS (192.168.2.10).
      I have one dynamically assigned IP.
      What is the best solution to link it all up on the same 192.168.2.subnet?
      AND, to allow access to PFSense AND the DSL modem/router (two gateways) from the client?
      Right now. the server and client are linked and working flawlessly.
      Just wish to add the PFSense box to use as firewall/router.

      1 Reply Last reply Reply Quote 0
      • marcellocM
        marcelloc
        last edited by

        Read about firewall bridge in docs.pfsense.com.

        Treinamentos de Elite: http://sys-squad.com

        Help a community developer! ;D

        1 Reply Last reply Reply Quote 0
        • johnpozJ
          johnpoz LAYER 8 Global Moderator
          last edited by

          'AND, to allow access to PFSense AND the DSL modem/router (two gateways) from the client?"

          Why? would you want this?

          If me, I would either just turn your current gateway into just a modem, bridge mode so that your pfsense could get a public IP on its wan interface.  Then buy a switch and plug the lan of pfsense into the switch = done.

          Now pfsense is you firewall/nat device.. If you want to firewall between devices then put them on different segments connected to your pfsense sure.

          But since you say you want everything on one segment you have no need of more than 2 interfaces on the pfsense box and a switch for other devices.  If you can not turn off the nat on your current dsl device, then you could use pfsense as a bridging firewall.

          An intelligent man is sometimes forced to be drunk to spend time with his fools
          If you get confused: Listen to the Music Play
          Please don't Chat/PM me for help, unless mod related
          SG-4860 24.11 | Lab VMs 2.8, 24.11

          1 Reply Last reply Reply Quote 0
          • stephenw10S
            stephenw10 Netgate Administrator
            last edited by

            Why do you want it all on the same subnet?
            There is no need to use only one subnet you're just making things hard for yourself. pfSense will route between subnets so you would still have access from each one.
            If you just need access to the modem, to check it's connection speed for example, have a look here:
            http://doc.pfsense.org/index.php/Accessing_modem_from_inside_firewall#For_2.0

            Steve

            1 Reply Last reply Reply Quote 0
            • T
              T J
              last edited by

              Thanks for the response.
              The subnet on the sbs server and client is 192.168.2.subnet
              I have remote desktop configured and all works well.
              I want to have the sbs server configure ppoe and dhcp. Not PfSense.
              When I add the pfsense box, I must be able to change the ip from 192.168.1.1 to a 192.168.2.X.
              Why should this be so difficult?

              After doing this, I cannot access pfsense. It seems that pfsense wants to assign a 192.168.1.XXX to the server. I'm not sure what to do at this point. All works well with my original modem/router but not with PFsense.
              I have the sbs and client plugged into a 3com switch and can talk to each other. But, no internet access unless I allow Pfsense to take over and assign 192.168.1.XXX.
              I like PFsense features but it seems sooo difficult to set up the way that I need it to be.

              1 Reply Last reply Reply Quote 0
              • M
                Metu69salemi
                last edited by

                what is pfsense's static ip-address?

                1 Reply Last reply Reply Quote 0
                • stephenw10S
                  stephenw10 Netgate Administrator
                  last edited by

                  You can set the pfSense LAN IP to be whatever you want it to be.
                  You can disable the DHCP server in pfSense if you want to use the SBS box to do that instead or use static IP addresses.
                  However you cannot normally have SBS server control the PPPoE connection. Doing this would mean that traffic is tunnelled through the firewall (which it would not allow by default) and enters your network via the SBS box. Just thinking about how you might do this is making my head hurt!  :(
                  The whole point of a firewall box is that it is the first device seen by outside packets.

                  You almost certainly don't need to do this. You could, for instance, setup 1:1 NAT to your SBS allowing it to appear to be directly connected but still having pfSense filter traffic.

                  Steve

                  1 Reply Last reply Reply Quote 0
                  • T
                    T J
                    last edited by

                    I have tried to change the LAN ip in PFsense from 192.168.1.1 to 192.168.2.2.
                    Then, in the sbs server, using router with ip option, configure router/gateway with ip address 192.168.2.2 (PFsense) and my isp dns addresses as I obviously cannot use the server address here.
                    However, When I type 192.168.2.2 in the browser, I cannot access the pfsense box.
                    I have set ppoe using PFsense and disabled dhcp in pfsense earlier when I was connected using 192.168.1.X. I just assumed that this would work. I was wrong.

                    1 Reply Last reply Reply Quote 0
                    • W
                      wallabybob
                      last edited by

                      @T:

                      When I add the pfsense box, I must be able to change the ip from 192.168.1.1 to a 192.168.2.X.
                      Why should this be so difficult?

                      I presume you have found the console option to change the IP address of an interface.

                      I have observed a couple of times that a reboot seems to be needed for major changes in pfSense interface address to take effect.

                      In some cases, I have found it sufficient to restart the pfSense web GUI from the console menu after changing IP address.

                      1 Reply Last reply Reply Quote 0
                      • T
                        T J
                        last edited by

                        OMG…
                        I'm sooo embarrased.
                        Somehow, I had the nic configuration reversed.
                        I've set this so many times that I guess I wasn't paying close attention when configuring the nics.
                        Strangely, it worked on the 192.168.1.X and I didn't change anything other than the lan IP.
                        But after rebooting, I noticed that the IP's were reversed.
                        Of course it wouldn't work.
                        Sheese!
                        Working like a charm now!!
                        Thanks for all your help!!

                        1 Reply Last reply Reply Quote 0
                        • First post
                          Last post
                        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.