DHCPs assign wrong pools



  • I've set up 3 DHCP for LAN, LAN2 and  Wireless on the WRAP board
    Pool is:

    LAN      => 192.168.1.10 - 192.168.1.49                (DHCP Interface IP 192.168.1.1)
    LAN2    => 192.168.1.50 - 192.168.1.99                (DHCP Interface IP 192.168.1.2)
    Wireless => 192.168.1.100 - 192.168.1.149            (DHCP Interface IP 192.168.1.3)

    Now, no metter what port I am connected to, im getting the ip from the pool of last dhcp which is wireless.

    WHY?



  • Why do you have the same subnets everywhere? Is this a bridged scenario?



  • well kind of drdge, in another post i wass telling that I want to use one DHCP for all interfaces (exept WAN) which should be done by setting all interfaces lets say to bridge with LAN and then ading firewall rule to "any to any"  BUT for some reasont it aint working…

    only interface that is woking is WAN -> LAN, all others just luve by themselfs independantly



  • if its a bridge then jou have now 3 dhcp servers on 1 lan
    that is how it coms that you get the whrong dhcp server
    remove the bridge
    en sub youre network up

    lan ip 192.168.1.1/26
    lan dhcp ip 192.168.1.1
    dhcp range 192.168.1.2 - 192.168.1.63

    lan2 ip 192.168.1.65/26
    lan2 dhcp ip 192.168.1.65
    dhcp range 192.168.1.66 - 192.168.1.127

    Wireless ip 192.168.1.129/26
    wireless dhcp ip 192.168.1.129
    dhcp range 192.168.1.130 - 192.168.1.191



  • jeroen234, I know that you cant have 3 DHCPs for one bridge…. its not even possoble in the configuration... when u bridge interface it automatiaclly disables the DHCP for that interface (I hope, at least it hides the dhcp tab)



  • Sorry, I don'T understand the problem  ::)



  • hoba, ok let me gust erace my brain and pretend im dummy user, lol
    Just installes everything, got WAN and LAN interfaces running OK, and connectiong to the internet normally…
    What I do to get other interface to use same DHCP pool as LAN, and that it will go to the internet?  :-\



  • Basically if you bridge another interface to LAN the clients on this one should receive dhcp from the same server configured at LAN interface. Also check settings at system>advanced. If the filtering bridge is enabled there (this is an option of the newer versions of pfsense) you have to create pass rules at the bridged interface too. For the older versions you always needed the pass rules as the bridge was filtering by default but you should always be at the latest version.



  • aint working…
    here is what i did
    1. reset to defults
    2. skipped VLANs setup
    3. set the interfaces (LAN -> sis0, WAN -> sis1, opt1 - > sis2)
    4. skiped wizard
    5. in OPT1 selected bridge with LAN, and Enabled the interface
    6. add firewall rule to pass anything from any and to any (all stars)
    7. Pluged in to OPT1 released current ipaddress
    8. renewed IP address on OPT1, got no DHCP reply....

    (I also chekd bridge filtering and it is not cheked)
    So? Did i do something wrong or thas the OS that dont like me?



  • try bridging lan -> opt1 instead of the reverse of that.



  • no tryed
    LAN <-> OPT1
    and
    LAN -> OPT1

    neither of rhem are working….
    Did any one got it to work? Why wouldnt u do it as ussually like StarOS has it, you craate the bridge and then assign mac addreses to it and everything works perfectly,,,,  but here im going crazy.... whats a point of the router if it doesnt brige the interfaces?



  • Yes it works fine, I have a bridge running here at my home.

    Never seen StarOS, didn't know that we where required as developers to copy cat other software…



  • um… why it doesnt work here then... are u running EMbedded version?

    PS: no u dont have to copy, but its all the same anyway... most of the opensorse modules...



  • @alexus:

    um… why it doesnt work here then... are u running EMbedded version?

    Not sure, as I said before it works fine here.  In fact I just fired up another box and tested it with wireless bridge.  Works fine.

    @alexus:

    PS: no u dont have to copy, but its all the same anyway… most of the opensorse modules...

    Not quite.  BSD and Linux are completely different animals.



  • lets keep the linux VS bsd discusion for other forum post…

    what version do you have on your wrap box?
    also do u know thw command to see the bridging tabls for if_bridge?



  • @alexus:

    lets keep the linux VS bsd discusion for other forum post…

    Then don't proclaim that everything is the same.  It is not.

    @alexus:

    what version do you have on your wrap box?

    Who said I have a wrap?  I have 10+ boxes all of which are on the latest version from http://www.pfsense.com/~sullrich/BETA2-BUGVALIDATION5/

    @alexus:

    also do u know thw command to see the bridging tabls for if_bridge?

    ifconfig



  • looks strange too me then… ifconfig sais that the bridge0 is there and is between sis0 and sis2  so it should work i think...

    do you know how I can check the bridge functionality in command prompt?



  • Show the contents of ifconfig

    Have you rebooted the firewall by chance?  How about the client?



  • i havent reboot any oh them… getting ipconfig now



  • Try rebooting.

    For some reason my iMac will not obtain an IP until I reboot.  I really don't know why this is the case and frankly I'm not interested in chasing it down since its such an easy remedy.



  • here is ifconfig… and im rebooting in meanwhile...

    ath0: flags=8802 <broadcast,simplex,multicast>mtu 1500
    	ether 00:80:c8:17:e9:da
    	media: IEEE 802.11 Wireless Ethernet autoselect
    	status: no carrier
    	ssid "" channel 1
    	authmode OPEN privacy OFF txpowmax 100 protmode CTS burst
    sis0: flags=8943 <up,broadcast,running,promisc,simplex,multicast>mtu 1500
    	options=8 <vlan_mtu>inet6 fe80::20d:b9ff:fe02:5a08%sis0 prefixlen 64 scopeid 0x2 
    	inet 192.168.1.1 netmask 0xffffff00 broadcast 192.168.1.255
    	ether 00:0d:b9:02:5a:08
    	media: Ethernet autoselect (100baseTX <full-duplex>)
    	status: active
    sis1: flags=8843 <up,broadcast,running,simplex,multicast>mtu 1500
    	options=8 <vlan_mtu>inet6 fe80::20d:b9ff:fe02:5a09%sis1 prefixlen 64 scopeid 0x3 
    	inet 192.168.0.101 netmask 0xffffff00 broadcast 192.168.0.255
    	ether 00:0d:b9:02:5a:09
    	media: Ethernet autoselect (100baseTX <full-duplex>)
    	status: active
    sis2: flags=8943 <up,broadcast,running,promisc,simplex,multicast>mtu 1500
    	options=8 <vlan_mtu>inet6 fe80::20d:b9ff:fe02:5a0a%sis2 prefixlen 64 scopeid 0x4 
    	inet 192.168.1.2 netmask 0xffffff00 broadcast 192.168.1.255
    	ether 00:0d:b9:02:5a:0a
    	media: Ethernet autoselect (none)
    	status: no carrier
    pfsync0: flags=41 <up,running>mtu 2020
    	pfsync: syncdev: lo0 maxupd: 128
    pflog0: flags=100 <promisc>mtu 33208
    lo0: flags=8048 <loopback,running,multicast>mtu 16384
    	inet6 ::1 prefixlen 128 
    	inet6 fe80::1%lo0 prefixlen 64 scopeid 0x7 
    bridge0: flags=8043 <up,broadcast,running,multicast>mtu 1500
    	ether ac:de:48:21:1a:75
    	priority 32768 hellotime 2 fwddelay 15 maxage 20
    	member: sis0 flags=7 <learning,discover,stp>port 2 priority 128 path cost 55 forwarding
    	member: sis2 flags=7 <learning,discover,stp>port 4 priority 128 path cost 55 disabled</learning,discover,stp></learning,discover,stp></up,broadcast,running,multicast></loopback,running,multicast></promisc></up,running></vlan_mtu></up,broadcast,running,promisc,simplex,multicast></full-duplex></vlan_mtu></up,broadcast,running,simplex,multicast></full-duplex></vlan_mtu></up,broadcast,running,promisc,simplex,multicast></broadcast,simplex,multicast> 
    


  • member: sis2 flags=7 <learning,discover,stp>port 4 priority 128 path cost 55 disabled

    It's disabled.  It won't forward.    You have a ethernet loop?</learning,discover,stp>



  • i rebooted aint working… and u know that before me lol

    what do u mean by loop?



  • It appears you are creating an ethernet loop by plugging the bridged segment into the same switch, etc.

    If one of the members of the bridge is disabled then either the above is true or you don't have a cable plugged into the port.



  • yea, i got only one cable unluged… dont tell me that the i need to have 2 cables in in order for the bridge to work?



  • if that is the case then how do i make it to work that i can have 2 independant ports so that i can use eather one of them to be routed to the WAN port? Also if I want to route WLAN to WAN with one IP pool then i have to have LAN cable pluged in? That doesnt make any sense…



  • If all you want is access to the internet from etiher interface simply setup a seperate subnet for each interface and setup DHCP Server.

    I've never heard of a 2-way bridge where only one port is plugged in – whats the point?!



  • the point is that lets say we have Wireless router and also it works as regular router… in all "comercial" products we have only one DHCP pool for the simplicity and easy managment... also we dont need to use LAN ethernet port to use Wireless....  in th your product what i amd getting is tha I have to have all cables pluged in in order to use the product with single DHCP.... or I have to set up dferent subnets but that makes my network scruwed up, espesially windows file sharing (because it hates different subnates)

    next the captive portal, if I want to run in on both wireless and one of the lan ports simutaniously? normally all hotspots are limited to 1 port, so if you have "internal" bridge or logical bridge, then you bridge t ports togather and put the main port on the hotspot...

    Probably we are talking about different types of bridges... what i mean is that i need "logical" bridge where 2 or more ports could be goined to one, its like I connect one routher port to the switch... so that I will have 2 ports and not one....

    Did I make myself clear?



  • @alexus:

    the point is that lets say we have Wireless router and also it works as regular router… in all "comercial" products we have only one DHCP pool for the simplicity and easy managment... also we dont need to use LAN ethernet port to use Wireless....  in th your product what i amd getting is tha I have to have all cables pluged in in order to use the product with single DHCP.... or I have to set up dferent subnets but that makes my network scruwed up, espesially windows file sharing (because it hates different subnates)

    Huh?  Whats the difference between a wireless router and one that works as a router?!?  Isn't that the same thing?

    @alexus:

    next the captive portal, if I want to run in on both wireless and one of the lan ports simutaniously? normally all hotspots are limited to 1 port, so if you have "internal" bridge or logical bridge, then you bridge t ports togather and put the main port on the hotspot…

    Captive portal will only operate on one interface at the same time.

    @alexus:

    Probably we are talking about different types of bridges… what i mean is that i need "logical" bridge where 2 or more ports could be goined to one, its like I connect one routher port to the switch... so that I will have 2 ports and not one....

    I still fail to see the point of making two ports one if you are not going to plug 2 devices in.  A bridge connects the two ports together therefore something must be plugged into them.

    @alexus:

    Did I make myself clear?

    Nope, I'm even more confused.  Perhaps you need to draw a visio diagram.



  • ok here is the diagram of what I want to do… basically it the same thing as D-Link DSA-3200 do...
    How would you do that with your product?



  • if you have logical bridge you can do that by bridging LAN2 and Wireless togather and applying hotspot to that bridge and then routing the bridge to the WAN



  • @alexus:

    ok here is the diagram of what I want to do… basically it the same thing as D-Link DSA-3200 do...
    How would you do that with your product?

    Sorry, we are again at the point where I don't understand you at all  :o
    That image is even more confusing…



  • Can you please draw a correct drawing, what is all this routing and stuff ? Is this all one pfsense box ?

    Where is hotspot in this ? is that captive portal ?

    I mean, this drawing dows not make any sense at all.



  • aaaaaa…. im gonna kill myself....

    ok, lets do that in small steps...

    a. what comercial hotspots have u played with?
    b. lets say I want to use LAN2 and Wireless withr the same DHCP, but so that one of the interfacesc could be down and another work independantly... how would I do that?

    c. if I want to have HOtSpot working for both, 1 wireless port and 1 lan port, how would u do that?



  • yes hotspot is captive portal…
    the boxes are the ports, either physical or logical
    routing is basic NAT from WAN to local



  • @alexus:

    aaaaaa…. im gonna kill myself....

    Is this necessary?  If you think you are frustrated then you should take a step back and ponder how we feel receiving this type of behavior.

    @alexus:

    ok, lets do that in small steps…

    a. what comercial hotspots have u played with?
    b. lets say I want to use LAN2 and Wireless withr the same DHCP, but so that one of the interfacesc could be down and another work independantly... how would I do that?

    Okay, you mention LAN2 here, and below you are going to mention LAN1.  Any chance that you can get your story straight?

    @alexus:

    c. if I want to have HOtSpot working for both, 1 wireless port and 1 lan port, how would u do that?

    Turn the wireless router into bridge mode (not pfsense).  On a lot of linksys models you can simply plug one of the included LAN ports into the pfSense LAN segment and it does exactly what you're looking for.

    Then hook the wireless router up to the LAN port on pfSense.  I'm still not understanding how a LAN2 comes into play… If you need 2 lans then simply hang a switch off pfSense's LAN port and plug both of the real LANs and Wireless into this.



  • um what is the point to use 2nd device if i have all avelible ports on my curent device… 1 WAN, 2 LAN, 1 Wireless....
    the point of all of that is that I want to run captive portal for both desktops and wireless from the same device...  + i need to have 1 port that is not beeing identificated...  this is regular setup for alll commersiall products

    as to the LAN nmaming confusion.... on diagram i just added logical port... so i needed the name for it....



  • Sounds almost like you're doing something that the current code can't handle.  We'll await your patch.

    –Bill



  • @alexus:

    um what is the point to use 2nd device if i have all avelible ports on my curent device… 1 WAN, 2 LAN, 1 Wireless....
    the point of all of that is that I want to run captive portal for both desktops and wireless from the same device...  + i need to have 1 port that is not beeing identificated...  this is regular setup for alll commersiall products

    as to the LAN nmaming confusion.... on diagram i just added logical port... so i needed the name for it....

    You need to be a little more descriptive.  What is the 2nd device you refer to?  The switch?



  • well i can ask my programmers to rwite it, since we where to write full OS on our own, but thats too hard…
    and even if we will write it for you I have no idea how to integrate it with what you have


Locked