On Wed, Jan 6, 2010 at 1:26 PM, Karl Fife <[email protected]> wrote:
Thanks for the ideas! It's working with the exception of a traffic shaping
problem.
What I did to set this up is
1. Bridged the OPT interface with WAN, leaving all other fields blank
2. Created a rule on the tab of the OPT interface to 'pass' 'any' protocol
3. Attached the host to the OPT interface, and assigned the appropriate IP
info.
I notice that my upstream traffic is shaped (as expected) but that the
downstream traffic is not (unexpected). This presents a problem for VoIP
(although serendipitously it's the more sensitive upstream shaping that IS
working at the moment).
My first thought was "oh yeah--DUH, the shaping queues are in layer 3,
bridging happens in layer 2", but then It occurred to me that the upstream
traffic IS actually being shaped. Confused again.
From: "Chris Buechler" <[email protected]>
To: <[email protected]>
Sent: Wednesday, January 06, 2010 9:38 PM
Subject: Re: [pfSense Support] 1:1 NAT - bind actual external IP to an
optional interface?
The rules and queues process the same whether it's L2 or 3. How do you
have the shaper configured? With OPT bridged to WAN, I presume you
have a LAN as well, and I'm guessing the shaper is configured for LAN
and WAN?
That's preciesely right.
Inside: LAN, Outside: WAN.
Is that the right setting for the shaper in this bridged configuration?
(And again OPT2 is bridged to WAN, OPT1 is currently idle, Soekris 5501)
I am puzzled as to why it shapes in only one direction. As configured, I
would have expected it to work in both or none. Without having the OPT
interface called out by name in the shaper wizard, it know to shape the
upstream traffic? How do I tie the downstream traffic to the queue?
Thanks!
-Karl
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
Commercial support available - https://portal.pfsense.org
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
Commercial support available - https://portal.pfsense.org
