4

I have a pfSense 2.0-BETA3 box as a home router. The box has 3 wired ETH ports and a wireless interface. It is configured as follow :

  • WAN : vr0
  • LAN : BRIDGE0
  • OPT1 : vr1
  • OPT2 : vr2
  • OPT3 : ath0 (wireless card)
  • BRIDGE0 : OPT1, OPT2, OPT3

There is a PC connected directly behind OPT1, and a switch connected behind OPT2 with multiple computers behind it. pfSense handles the NAT to connect to the internet and DHCP to all hosts.

I have a rule to allow all traffic from LAN to any.

Connecting from any of the interfaces behind pfSense can connect to the net with no problem. But connections from a PC behind OPT1 to a PC behind OPT2 fail. Using Wireshark, I can see that SYN packet are sent, but no response is received (or ICMP echo request, with no echo response).

What more should I configure to allow traffic between the different interfaces of the bridge ?

Thanks for your help !

  • I had exactly the same problem. After adding firewall rules from the bridge member interfaces to the bridge network it seems to work. Cheers Cidi – cidi Sep 11 '11 at 20:16
5

I had exactly the same problem.

After adding firewall rules from the bridge member interfaces to the bridge network it seems to work.

Cheers Cidi

  • That's exactly right. Create a rule for each interface in the bridge, allowing traffic from any source to the bridge itself, and everything works just fine. – Bogdan Stăncescu Dec 10 '17 at 13:41

Your Answer

By clicking "Post Your Answer", you acknowledge that you have read our updated terms of service, privacy policy and cookie policy, and that your continued use of the website is subject to these policies.

Not the answer you're looking for? Browse other questions tagged or ask your own question.