Static WAN interfaces crashes, DHCP is OK

kejianshi

Anyway - There is a solution to make it work with pfsense - I'm just not sure it will work out if you are limited to a tiny Alex install. If you are on Fullrate, same as this other guy, they bind to MACs. Pain in the butt.

lbm_

Sorry! 8)

I am awaiting answer from the ISP now, but I am quite sure that there is nothing really to do about it…

Currently I am limited to the alix board (which I actually bought to this pfsense "project")

kejianshi

stephenw10 mentioned something log ago that I never tried. He said something about using VIPs and entering seperate MACs for each VIP to give fullrate ISP MACs to bind to. (I may be butchering his actual words)

I'd assumed this would happen on the interfaces drop down menu, after installing the VIPs and that VLAN would be required.

I'm totally not sure, since I've never attempted such a thing. Fullrate isn't blazing fast. Could you add several USB NICs if it came down to it?
USB could handle their bandwidth no problems.

stephenw10

I've never tried it either, I've never had cause to. I'm not sure if you can spoof the MAC on a VIP. :-\ Seems like it should work if you can though.

Hmm, some breif googling seems to indicate you can't run multiple MACs on the same real NIC.

Steve

kejianshi

Choices are run as VM, get more NICs… ???

Sucks.

stephenw10

Seems like that. Can VLAN interfaces have MACs independent of the host NIC? Seems probable they cannot.

Edit:
@jimp:

VLAN MACs follow the MAC of their parent interface.

I quite liked Doktornotor's suggestion of proxying DHCP requests to the real internal machines. If it uses dhcp realay that may mean you couldn't run a dhcp server on the box for other clients.
http://doc.pfsense.org/index.php/DHCP_Relay

Steve

wallabybob

@stephenw10:

Edit:
@jimp:

VLAN MACs follow the MAC of their parent interface.

That is the default behaviour. The web GUI allows specification of MAC address on VLAN interfaces. I have a recollection that in some contexts the configured MAC address for a pfSense VLAN interface wasn't propagated to the hardware. (I can't remember the context - a virtualised environment? a 'feature' of specific hardware?)

Bridge interface MAC address seems to get propagated to the hardware.