Filtering Bridge

josueharos

Hope someone can point to the right direction. My setup is like this

Internet
||
pfSense Box
|| || ||
Wifi VLAN LAN Web Servers
10.252.252.0/24 10.0.1.0/24 10.254.254.0/24

I have a SQL Server and Active Directory sitting in my main LAN 10.0.1.0/24, what i want to do is to either move the SQL to diferent subner but still be able to authenticate to the active directory server or place a transparent bridge in between.

Scenario 1.

Internet
||
–----------- pfSense Box ---------------
|| || ||
Wifi VLAN LAN Web Servers
10.252.252.0/24 10.0.1.0/24 10.254.254.0/24
||
{LAN COMPUTERS/ AD Server 10.0.1.2}
||
pfSense Box 2
||
SQL Server
{10.253.253.2}

Scenario 2.
Internet
||
------------- pfSense Box ---------------
|| || ||
Wifi VLAN LAN Web Servers
10.252.252.0/24 10.0.1.0/24 10.254.254.0/24
||
{LAN COMPUTERS/ AD Server 10.0.1.2}
||
pfSense Box Bridge
||
SQL Server
{10.0.1.4}

I have created both scenarios, but something is missing in my config since i am getting tcp:s on Directory Service - TCP 445 and Kerberos TCP 88

10.0.1.4:1446 - 10.0.1.2:445 TCP:S
10.0.1.4:1278 - 10.0.1.2:88 TCP:S

I am kind of lost here, are these scenarios possible?

Thanks in Advance

2.2-RELEASE (i386)