Thank you Chris!
Since I am interested in this too, are there any tricks when you want to
do the same but you have a multi-WAN setup, or ,probably even worse, a
multi-WAN setup with different WAN bandwidth?
Thank you all!
Hannes Werner wrote on 26.09.2014 16:51:
thank you very much Giles, but unfortunately it doesn't help.
anyone here who is using asterisk behind pfSense on a dynamic IP WAN
I have also used asterisk behind a dynamic PPPoE WAN. I had the exact
same issues that
pfsense2 - server:
Tunnel network: 10.0.8.0/30 (no need for /24 on site2site)
pfsense1 - client:
Tunnel network: 10.0.8.0/30 (You can even keep it empty)
Keeping or removing the remote network on the client side shouldn't be
important, the difference being that if you keep it,
Jeremy Martijn wrote on 05.11.2012 12:42:
I have a question regarding the bandwidth limiter on pfsense.
Im going to describe the current situation and what I have done so far.
I want to limit every user on the network to a 20Mbit/s down/10Mbit/s
I have been seeing the following message in my system log, being
repeated every 20-30 seconds:
kernel: arp: unknown hardware address format (0x0103)
The NIC with those errors has some wireless AP's connected to it.
After some searching I couldnt find any definite answer about the
The only difference to having different GW for each WAN is that with the
same GW you need to specify a differnet monitor IP for one of the WAN
interfaces. The rest of the configuration stays the same.
Choose your monitor IP carefully though, if that IP ever stops
responding or has a bad
David Brown wrote on 10/24/2011 02:34 PM:
Using a VPN is certainly a possibility - our road warriors who use a
laptop as a main computer use a VPN (OpenVPN), and I use a VPN from my
home machine regularly to access everything in the network here. Where
VPNs are the right solution, they are
Most of the times I have had trouble with the routing and not with the
firewall rules. Check if the client has the correct gateway set for the
LAN subnet and check if the push route is added correctly. A
traceroute from the client can help you see if the packets are being
send through the VPN
I havent been using pfsense for very long, but under Firewall-Rules you
should have a tab OpenVPN. Try putting there some rules, it works for me.
Setting up an extra interface used to be done in older pfsense version,
no idea if its still valid. Maybe someone more experienced can give
Jim Pingle wrote on 12.10.2011 23:55:
In 2.0 each interface is renamed in a unique way so you do not need dev
tun or any similar entries in the options.
You can assign the interfaces if you want (set an IP type of 'none' on
them) and filter individually if you want, too.
I run with two of
Mail list logo