Hi all,
I am using an Astaro Firewall for my perimeter firewall/router. Under that 
subnet I have built a pfSense machine just to handle my wireless clients which 
can reach up to 600 at any given moment. There are points in time where the 
wireless clients cannot access anything on the internet for a couple of minutes 
but other than that everything is working perfectly. The current setup is:

internet<---->astaro (192.168.2.0/24)<----switch--->main LAN
                                                                            |
                                                                            |
                                                                            |
                                                                       pfSense
                                                                            |
                                                                            |
                                                                192.168.180.0/22

During the disconnects I still have access to the admin gui of pfSense from a 
wireless client but nowhere else. The only entry in the system logs is some ARP 
messages that state that some MAC address changed IP to some other value. I was 
thinking that the problem might be the switch but I would like to build a 
pfSense box with 3 NICs (or more), one for my main lan, one for the wireless, 
and possibly one for all my VoIP extensions. Do you think that that will 
eliminate my disconnection issues or could it be something else like the MTU 
size of my current pfSense machine. This way I can eliminate Astaro even though 
it is a great UTM but it's not free and have pfSense manage the whole network. 
Running 1.2.3 with a default MTU size of 1500 but after installing NMap I can 
see that there are packets up to 1518 in size.

Thanks
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Commercial support available - https://portal.pfsense.org

Reply via email to