I have a machine with four NICs (physical ethernet ports) and I'd like to set up a fully updated pfSense on it. So far it looks like this:

enter image description here

enter image description here

A few things I've done so far:

  1. I've set up the bridge ("BRIDGE (opt3)") to include LAN0, LAN1, and LAN2.

  2. The Internet connection is plugged into WAN (em0).

  3. I've added a firewall rule where all source "bridge net" traffic is passed to destination "bridge net".

  4. All interfaces are active.

  5. LAN0 is currently set to static IPv4 with IP

  6. DHCP server is active on LAN0.

If I plug a device into LAN0, the device is assigned an IP (such as and can access the pfSense web interface at

But if I plug into and of the other LAN* ports, my device isn't even assigned an IP, and can't see/access anything.

What I want in the end is:

  1. Devices connected on LAN* can all connect to and interact with each other.

  2. All of these devices have Internet access via WAN.

  3. pfSense acts as a firewall and NAT between WAN and all the LAN* interfaces.

  4. pfSense runs a DHCP server to assign IPv4 IPs to all devices connected on LAN* in the same subnet i.e. 10.0.3.*.

What else do I need to do? Do I need to set up more firewall rules? Or something I need to do to set up the DHCP server? Is the bridge set up correctly?


Here is a really good guide. But it basically boils down to give your bridge its ip address. Remove the lan0 ip. Then setup an group that includes your ports. Firewall rules for the bridge group and then services(dhcp and dns come to mind)

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.