Re: [pfSense Support] Configuration Questions

Mon, 02 Feb 2009 05:32:07 -0800

Hi Chris,

Ok, I understand that we can not use Multi-Wan and Load Balancing.
Bridging can be made to work with failover but requires some manual
hacking to bring up and down the bridge appropriately, or you could
probably make an easy code change to make STP operate properly in
coordination with your switches.
What sort of code change would I make to get STP operating properly?  Can you send me an example or where I could look to figure it out?  I will be installing the new pfSense firewall this week so I can set that up then, once I move the network traffic over to the new route, I will be able to take the other firewall and fix that one.

Thanks

Joseph

Chris Buechler wrote: 
On Sun, Feb 1, 2009 at 5:09 PM, Joseph Hardeman <[email protected]> wrote:
  
Hi Everyone,

I have a question that I am hoping someone will be able to help me with.

I am about to migrate to a network that has two circuits to the same
provider with BGP on each circuit so if one circuit goes down we will be
able to keep our traffic flowing.  Our pfSense firewall is setup in Bridge
mode connecting on the front interface of the bridge to one of our routers
and the backend interface of the bridge to one of our switches which then
connect to the front side of all of our servers.

    

Bridging can be made to work with failover but requires some manual
hacking to bring up and down the bridge appropriately, or you could
probably make an easy code change to make STP operate properly in
coordination with your switches.


  
What I want to do is use the Multi-WAN and possible Load Balancing
functionalities and have one circuit as primary and the other circuit as
secondary then have CARP running as a hardware failover between two
identical pfSense boxes.  My question is can this be done in bridge mode

    

Multi-WAN and load balancing, no. When bridging, the firewall doesn't
touch anything at layer 3, so it can't route or load balance. That's a
function of whatever router your hosts are using outside the firewall,
their default gateway.

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Commercial support available - https://portal.pfsense.org

--
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean. 
begin:vcard
fn:Joseph Hardeman
n:Hardeman;Joseph
org:Colocube, LLC;Operations
adr:;;4311 Communications Dr;Norcross;GA;30093;US
email;internet:[email protected]
title:Data Center Manager
tel;work:678-427-5890
tel;cell:678-427-5890
note:This email message is intended for the use of the person to whom it has been sent, and may contain information that is confidential or legally protected. If you are not the intended recipient or have received this message in error, you are not authorized to copy, distribute, or otherwise use this message or its attachments. Please notify the sender immediately by return e-mail and permanently delete this message and any attachments.  Thank you.
x-mozilla-html:FALSE
url:http://www.colocube.com
version:2.1
end:vcard



---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Commercial support available - https://portal.pfsense.org

Reply via email to