Also, so everyone knows, there are two ways to set up this connection using a separate firewall.
I can either put the modem on PPPoA and then put the firewall inside of the modem with static IPs (WAN on external IP addr. And LAN on my internal net)\ Or I can bridge the modem and connect using the firewall on PPPoE. I have done both and they both work as far as pinging the IPs and going through it from inside to outside on the Internet. Each time I try to come in from the outside through my designated rules/ports/address I get denied. Could it be because I am not using Proxy ARP? James Kusler, Information Technology Manager PHONE| 509.624.1613 or 800.822.4456 FAX| 509.624.1604 [EMAIL PROTECTED] | www.sound-tele.com | www.solaxis.com -----Original Message----- From: Bill Marquette [mailto:[EMAIL PROTECTED] Sent: Wednesday, December 26, 2007 11:19 AM To: [email protected] Subject: Re: [pfSense Support] Virtual Ips On Dec 26, 2007 12:13 PM, James Kusler <[EMAIL PROTECTED]> wrote: > It gave the choices 'CARP', 'Web Proxy', and 'Other'. So if that has > changed in the newer version that may help. If it truly says "Web Proxy", you didn't get an official release from us! It should read, CARP, Proxy ARP, and Other. I've explained the differences before, but I'll do it again here. CARP is primarily used for high availability when you have multiple firewalls in a cluster. With that said I recommend it over proxy arp as if you ever go to a cluster config you'll have to convert anyway. Proxy ARP is primarily for when you have a single firewall and multiple addresses that need to be NAT'd through it. "Other" is for when you have a subnet routed to your firewall - ie. not the same subnet the firewall is on usually (although with PPPoE it may be). The IPs are always seen at your firewall and you just need pfSense to recognize that it should allow you to do something with them. --Bill --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
