DHCPs assign wrong pools

alexus

I've set up 3 DHCP for LAN, LAN2 and Wireless on the WRAP board
Pool is:

LAN => 192.168.1.10 - 192.168.1.49 (DHCP Interface IP 192.168.1.1)
LAN2 => 192.168.1.50 - 192.168.1.99 (DHCP Interface IP 192.168.1.2)
Wireless => 192.168.1.100 - 192.168.1.149 (DHCP Interface IP 192.168.1.3)

Now, no metter what port I am connected to, im getting the ip from the pool of last dhcp which is wireless.

WHY?

hoba

Why do you have the same subnets everywhere? Is this a bridged scenario?

alexus

well kind of drdge, in another post i wass telling that I want to use one DHCP for all interfaces (exept WAN) which should be done by setting all interfaces lets say to bridge with LAN and then ading firewall rule to "any to any" BUT for some reasont it aint working…

only interface that is woking is WAN -> LAN, all others just luve by themselfs independantly

jeroen234

if its a bridge then jou have now 3 dhcp servers on 1 lan
that is how it coms that you get the whrong dhcp server
remove the bridge
en sub youre network up

lan ip 192.168.1.1/26
lan dhcp ip 192.168.1.1
dhcp range 192.168.1.2 - 192.168.1.63

lan2 ip 192.168.1.65/26
lan2 dhcp ip 192.168.1.65
dhcp range 192.168.1.66 - 192.168.1.127

Wireless ip 192.168.1.129/26
wireless dhcp ip 192.168.1.129
dhcp range 192.168.1.130 - 192.168.1.191

alexus

jeroen234, I know that you cant have 3 DHCPs for one bridge…. its not even possoble in the configuration... when u bridge interface it automatiaclly disables the DHCP for that interface (I hope, at least it hides the dhcp tab)

hoba

Sorry, I don'T understand the problem ::)

alexus

hoba, ok let me gust erace my brain and pretend im dummy user, lol
Just installes everything, got WAN and LAN interfaces running OK, and connectiong to the internet normally…
What I do to get other interface to use same DHCP pool as LAN, and that it will go to the internet? :-\

hoba

Basically if you bridge another interface to LAN the clients on this one should receive dhcp from the same server configured at LAN interface. Also check settings at system>advanced. If the filtering bridge is enabled there (this is an option of the newer versions of pfsense) you have to create pass rules at the bridged interface too. For the older versions you always needed the pass rules as the bridge was filtering by default but you should always be at the latest version.

alexus

aint working…
here is what i did
1. reset to defults
2. skipped VLANs setup
3. set the interfaces (LAN -> sis0, WAN -> sis1, opt1 - > sis2)
4. skiped wizard
5. in OPT1 selected bridge with LAN, and Enabled the interface
6. add firewall rule to pass anything from any and to any (all stars)
7. Pluged in to OPT1 released current ipaddress
8. renewed IP address on OPT1, got no DHCP reply....

(I also chekd bridge filtering and it is not cheked)
So? Did i do something wrong or thas the OS that dont like me?

sullrich

try bridging lan -> opt1 instead of the reverse of that.

alexus

no tryed
LAN <-> OPT1
and
LAN -> OPT1

neither of rhem are working….
Did any one got it to work? Why wouldnt u do it as ussually like StarOS has it, you craate the bridge and then assign mac addreses to it and everything works perfectly,,,, but here im going crazy.... whats a point of the router if it doesnt brige the interfaces?

sullrich

Yes it works fine, I have a bridge running here at my home.

Never seen StarOS, didn't know that we where required as developers to copy cat other software…

alexus

um… why it doesnt work here then... are u running EMbedded version?

PS: no u dont have to copy, but its all the same anyway... most of the opensorse modules...

sullrich

@alexus:

um… why it doesnt work here then... are u running EMbedded version?

Not sure, as I said before it works fine here. In fact I just fired up another box and tested it with wireless bridge. Works fine.

@alexus:

PS: no u dont have to copy, but its all the same anyway… most of the opensorse modules...

Not quite. BSD and Linux are completely different animals.

alexus

lets keep the linux VS bsd discusion for other forum post…

what version do you have on your wrap box?
also do u know thw command to see the bridging tabls for if_bridge?

sullrich

@alexus:

lets keep the linux VS bsd discusion for other forum post…

Then don't proclaim that everything is the same. It is not.

@alexus:

what version do you have on your wrap box?

Who said I have a wrap? I have 10+ boxes all of which are on the latest version from http://www.pfsense.com/~sullrich/BETA2-BUGVALIDATION5/

@alexus:

also do u know thw command to see the bridging tabls for if_bridge?

ifconfig

alexus

looks strange too me then… ifconfig sais that the bridge0 is there and is between sis0 and sis2 so it should work i think...

do you know how I can check the bridge functionality in command prompt?

sullrich

Show the contents of ifconfig

Have you rebooted the firewall by chance? How about the client?

alexus

i havent reboot any oh them… getting ipconfig now

sullrich

Try rebooting.

For some reason my iMac will not obtain an IP until I reboot. I really don't know why this is the case and frankly I'm not interested in chasing it down since its such an easy remedy.

alexus

here is ifconfig… and im rebooting in meanwhile...

ath0: flags=8802 <broadcast,simplex,multicast>mtu 1500
	ether 00:80:c8:17:e9:da
	media: IEEE 802.11 Wireless Ethernet autoselect
	status: no carrier
	ssid "" channel 1
	authmode OPEN privacy OFF txpowmax 100 protmode CTS burst
sis0: flags=8943 <up,broadcast,running,promisc,simplex,multicast>mtu 1500
	options=8 <vlan_mtu>inet6 fe80::20d:b9ff:fe02:5a08%sis0 prefixlen 64 scopeid 0x2 
	inet 192.168.1.1 netmask 0xffffff00 broadcast 192.168.1.255
	ether 00:0d:b9:02:5a:08
	media: Ethernet autoselect (100baseTX <full-duplex>)
	status: active
sis1: flags=8843 <up,broadcast,running,simplex,multicast>mtu 1500
	options=8 <vlan_mtu>inet6 fe80::20d:b9ff:fe02:5a09%sis1 prefixlen 64 scopeid 0x3 
	inet 192.168.0.101 netmask 0xffffff00 broadcast 192.168.0.255
	ether 00:0d:b9:02:5a:09
	media: Ethernet autoselect (100baseTX <full-duplex>)
	status: active
sis2: flags=8943 <up,broadcast,running,promisc,simplex,multicast>mtu 1500
	options=8 <vlan_mtu>inet6 fe80::20d:b9ff:fe02:5a0a%sis2 prefixlen 64 scopeid 0x4 
	inet 192.168.1.2 netmask 0xffffff00 broadcast 192.168.1.255
	ether 00:0d:b9:02:5a:0a
	media: Ethernet autoselect (none)
	status: no carrier
pfsync0: flags=41 <up,running>mtu 2020
	pfsync: syncdev: lo0 maxupd: 128
pflog0: flags=100 <promisc>mtu 33208
lo0: flags=8048 <loopback,running,multicast>mtu 16384
	inet6 ::1 prefixlen 128 
	inet6 fe80::1%lo0 prefixlen 64 scopeid 0x7 
bridge0: flags=8043 <up,broadcast,running,multicast>mtu 1500
	ether ac:de:48:21:1a:75
	priority 32768 hellotime 2 fwddelay 15 maxage 20
	member: sis0 flags=7 <learning,discover,stp>port 2 priority 128 path cost 55 forwarding
	member: sis2 flags=7 <learning,discover,stp>port 4 priority 128 path cost 55 disabled</learning,discover,stp></learning,discover,stp></up,broadcast,running,multicast></loopback,running,multicast></promisc></up,running></vlan_mtu></up,broadcast,running,promisc,simplex,multicast></full-duplex></vlan_mtu></up,broadcast,running,simplex,multicast></full-duplex></vlan_mtu></up,broadcast,running,promisc,simplex,multicast></broadcast,simplex,multicast>

sullrich

member: sis2 flags=7 <learning,discover,stp>port 4 priority 128 path cost 55 disabled

It's disabled. It won't forward. You have a ethernet loop?</learning,discover,stp>

alexus

i rebooted aint working… and u know that before me lol

what do u mean by loop?

sullrich

It appears you are creating an ethernet loop by plugging the bridged segment into the same switch, etc.

If one of the members of the bridge is disabled then either the above is true or you don't have a cable plugged into the port.

alexus

yea, i got only one cable unluged… dont tell me that the i need to have 2 cables in in order for the bridge to work?

alexus

if that is the case then how do i make it to work that i can have 2 independant ports so that i can use eather one of them to be routed to the WAN port? Also if I want to route WLAN to WAN with one IP pool then i have to have LAN cable pluged in? That doesnt make any sense…

sullrich

If all you want is access to the internet from etiher interface simply setup a seperate subnet for each interface and setup DHCP Server.

I've never heard of a 2-way bridge where only one port is plugged in – whats the point?!

alexus

the point is that lets say we have Wireless router and also it works as regular router… in all "comercial" products we have only one DHCP pool for the simplicity and easy managment... also we dont need to use LAN ethernet port to use Wireless.... in th your product what i amd getting is tha I have to have all cables pluged in in order to use the product with single DHCP.... or I have to set up dferent subnets but that makes my network scruwed up, espesially windows file sharing (because it hates different subnates)

next the captive portal, if I want to run in on both wireless and one of the lan ports simutaniously? normally all hotspots are limited to 1 port, so if you have "internal" bridge or logical bridge, then you bridge t ports togather and put the main port on the hotspot...

Probably we are talking about different types of bridges... what i mean is that i need "logical" bridge where 2 or more ports could be goined to one, its like I connect one routher port to the switch... so that I will have 2 ports and not one....

Did I make myself clear?

sullrich

@alexus:

the point is that lets say we have Wireless router and also it works as regular router… in all "comercial" products we have only one DHCP pool for the simplicity and easy managment... also we dont need to use LAN ethernet port to use Wireless.... in th your product what i amd getting is tha I have to have all cables pluged in in order to use the product with single DHCP.... or I have to set up dferent subnets but that makes my network scruwed up, espesially windows file sharing (because it hates different subnates)

Huh? Whats the difference between a wireless router and one that works as a router?!? Isn't that the same thing?

@alexus:

next the captive portal, if I want to run in on both wireless and one of the lan ports simutaniously? normally all hotspots are limited to 1 port, so if you have "internal" bridge or logical bridge, then you bridge t ports togather and put the main port on the hotspot…

Captive portal will only operate on one interface at the same time.

@alexus:

Probably we are talking about different types of bridges… what i mean is that i need "logical" bridge where 2 or more ports could be goined to one, its like I connect one routher port to the switch... so that I will have 2 ports and not one....

I still fail to see the point of making two ports one if you are not going to plug 2 devices in. A bridge connects the two ports together therefore something must be plugged into them.

@alexus:

Did I make myself clear?

Nope, I'm even more confused. Perhaps you need to draw a visio diagram.

alexus

ok here is the diagram of what I want to do… basically it the same thing as D-Link DSA-3200 do...
How would you do that with your product?

alexus

if you have logical bridge you can do that by bridging LAN2 and Wireless togather and applying hotspot to that bridge and then routing the bridge to the WAN

hoba

@alexus:

ok here is the diagram of what I want to do… basically it the same thing as D-Link DSA-3200 do...
How would you do that with your product?

Sorry, we are again at the point where I don't understand you at all :o
That image is even more confusing…

lsf

Can you please draw a correct drawing, what is all this routing and stuff ? Is this all one pfsense box ?

Where is hotspot in this ? is that captive portal ?

I mean, this drawing dows not make any sense at all.

alexus

aaaaaa…. im gonna kill myself....

ok, lets do that in small steps...

a. what comercial hotspots have u played with?
b. lets say I want to use LAN2 and Wireless withr the same DHCP, but so that one of the interfacesc could be down and another work independantly... how would I do that?

c. if I want to have HOtSpot working for both, 1 wireless port and 1 lan port, how would u do that?

alexus

yes hotspot is captive portal…
the boxes are the ports, either physical or logical
routing is basic NAT from WAN to local

sullrich

@alexus:

aaaaaa…. im gonna kill myself....

Is this necessary? If you think you are frustrated then you should take a step back and ponder how we feel receiving this type of behavior.

@alexus:

ok, lets do that in small steps…

a. what comercial hotspots have u played with?
b. lets say I want to use LAN2 and Wireless withr the same DHCP, but so that one of the interfacesc could be down and another work independantly... how would I do that?

Okay, you mention LAN2 here, and below you are going to mention LAN1. Any chance that you can get your story straight?

@alexus:

c. if I want to have HOtSpot working for both, 1 wireless port and 1 lan port, how would u do that?

Turn the wireless router into bridge mode (not pfsense). On a lot of linksys models you can simply plug one of the included LAN ports into the pfSense LAN segment and it does exactly what you're looking for.

Then hook the wireless router up to the LAN port on pfSense. I'm still not understanding how a LAN2 comes into play… If you need 2 lans then simply hang a switch off pfSense's LAN port and plug both of the real LANs and Wireless into this.

alexus

um what is the point to use 2nd device if i have all avelible ports on my curent device… 1 WAN, 2 LAN, 1 Wireless....
the point of all of that is that I want to run captive portal for both desktops and wireless from the same device... + i need to have 1 port that is not beeing identificated... this is regular setup for alll commersiall products

as to the LAN nmaming confusion.... on diagram i just added logical port... so i needed the name for it....

billm

Sounds almost like you're doing something that the current code can't handle. We'll await your patch.

–Bill

sullrich

@alexus:

um what is the point to use 2nd device if i have all avelible ports on my curent device… 1 WAN, 2 LAN, 1 Wireless....
the point of all of that is that I want to run captive portal for both desktops and wireless from the same device... + i need to have 1 port that is not beeing identificated... this is regular setup for alll commersiall products

as to the LAN nmaming confusion.... on diagram i just added logical port... so i needed the name for it....

You need to be a little more descriptive. What is the 2nd device you refer to? The switch?

alexus

well i can ask my programmers to rwite it, since we where to write full OS on our own, but thats too hard…
and even if we will write it for you I have no idea how to integrate it with what you have