Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange
Join us in building a kind, collaborative learning community via our updated Code of Conduct.

Questions tagged [pfsense]

pfsense is a customized FreeBSD+pf distribution designed for use as a firewall. It wraps many of the features of the pf firewall code in an easy-to-use web interface.

0
votes
1answer
28 views

Unifi AP-PRO with pfSense running FreeRADIUS, with MySQL database externally

I'm in the process of moving from a set of Aerohive AP's to Unifi AP-PRO to increase the range of our wifi. Adding more Aerohives could be a solution, but they're way more expensive and I already have ...
0
votes
1answer
34 views

Configure LAN for IPv6 with SLAAC on WAN

My ISP assigns me an IPv4 address via DHCP and an IPv6 subnet through SLAAC. I set up my pfSense box to use NAT and DHCPv4 for my LAN network which works fine. However, on the IPv6 side, my LAN ...
0
votes
1answer
40 views

pfSense unable to LDAP bind to Active Directory Server

I've been instructed to setup an OpenVPN Server on our local pfSense VM. I've combed over tutorials and guides, netgate, openvpn documentation and I feel I must be missing something. I've tested the ...
0
votes
0answers
20 views

pfSense Port Forwarding with Static WAN IP

This is my first pfSense install and I'm trying to setup a WAN static ip portforward to internal ips for our clients to send data to their printers within our building. How I think this should / ...
0
votes
0answers
15 views

pfSense IPSec tunnel to AWS VPN fails to connect

I'm trying to set up a IPSec tunnel between an AWS VPC (using their VPN Gateway) and a pfSense. I have set up the IPSec config in pfSense according to the config I'm given from AWS. However, there ...
0
votes
0answers
37 views

ISP /29 Public IP not working on pfsense

recently I have purchased a block of /29 Public ips from our ISP. I have my network setup whereby the isp modem (SmartRG 360n) is in bridged mode which feeds a pfsense firewall. The wan is configured ...
0
votes
0answers
26 views

PfSense double nat and opening ports with ISP modem

At the office we I have a router/modem from my ISP which cannot be used in bridge mode, unfortunately. So I'll have to work with double NAT. Setup: (82.xx.xx.xx "wan" - ISP modem/router - 192.168.2....
0
votes
0answers
32 views

Setting up pfSense to bridge LAN NICs and connect WAN

I have a machine with four NICs (physical ethernet ports) and I'd like to set up a fully updated pfSense on it. So far it looks like this: A few things I've done so far: I've set up the bridge ("...
1
vote
1answer
62 views

Very high tcp retransmit rate to Internet on devices inside LAN

I work with Linux systems a lot as a developer and have a moderate level of networking knowledge, but the following situation is a real baffling mystery: I'm running pfSense 2.4.3 (that's current) on ...
0
votes
0answers
38 views

pfsense and virtual IP addresses

I'm quite new to pfsense and network configuration in general, so I'm sorry if the question is too simple. I'm trying to set up an IPSec connection to a client machine, and to assign a hostname to a ...
0
votes
0answers
18 views

Is there any way, in pfSense, to set up multiple routes to the same LAN subnet?

What I mean is, that I've got a given subnet with multiple points of ingress for redundancy - multiple gateway IPs to those subnets. I haven't found a way in pfSense, though, to be able to specify ...
0
votes
0answers
56 views

IPsec with NAT between pfSense and Fortigate - no ping or access from both sides

We have an IPsec VPN tunnel with NAT between pfSense 2.3.4 and Fortigate up and running. The local networks are the same (overlapping), so we use NAT. pfSense is managed by us and Fortigate by a ...
0
votes
1answer
49 views

Connecting to vpn through double nat

I have a pfsense gateway that connects to the ISP and gets a publix address. It takes care of servers and clients without a problem. To that gateway I connected another pfsense to play around and just ...
2
votes
0answers
145 views

Reverse proxy on pfSense 2.1.5 with Squid

I installed Squid on my pfSense and I am trying to reach 192.168.1.41 when the request is for sub1.dom.it, and I am trying to reach 192.168.1.42 when the request is for sub2.dom.it. I used to have ...
1
vote
0answers
37 views

pfSense : How to do 1:1 NAT to server hosted at remote location linked through IPSec tunnel

We have 2 data centers at 2 different locations and are moving our services from location A to B without interruption. Both location have a PFSense Firewall configured with IPSec tunnel between each ...
0
votes
0answers
12 views

What are the pros and cons of using PfSense DNS Forwarder or Resolver?

I am looking for a clean set of pros and cons for two mutually exclusive DNS configurations for pfsense router: Forwarder and Resolver. The configuration that I have in mind is a complex home-office ...
0
votes
0answers
97 views

UniFi and pfSense IPSec VPN not passing traffic

I have a IPSec VPN running between two sites. Site A is pfSense and site B is a UniFi Security Gateway. I have got the VPN established but I cant ping anything in either direction on the network. Any ...
0
votes
0answers
21 views

Issues with AWS IPSec when accessing from UAE

I set up a pfSense device in EC2 instance in AWSand configured to support IPsec from ios devices. While the connection is working properly, and also the internet access from USA and Europe, some of ...
1
vote
1answer
39 views

Juniper => D-Link => pfSense - how make WAN for pfSense

Ssory for, maybe, stupid question(and bad english), i'm newbie in system administration, but task it is. We have this net scheme - simple view: ISP Gateway || Juniper SRX240H(our gateway) ||...
1
vote
0answers
43 views

PFSENSE Topology w/Cisco L3 Switces

I have the need to configure a router on a stick variant where I have WAN in (not shown on image) and 2 LAN ports that go to each of the switches shown in the image. The vlan 'subinterfaces' live on ...
1
vote
1answer
53 views

Dedicated IP for webserver through pfsense and a draytek 2860

We have a leased line which has 8 public IP addresses. This connects to our Draytek 2860 router. From here we have an internal network which we use for our office computers and another network for ...
0
votes
0answers
228 views

Pfsense block only the internet on one single IP

Im after blocking a single IP on pfsense from the internet only, it can talk to other Ips on the lan fine only the internet. the IP in question is 10.0.0.22 Ive added a rule which failed to work ...
2
votes
0answers
78 views

IKEv2 with EAP-MSCHAPv2 with static IP for each client

I've successfully created an IKEv2 with EAP-MSCHAPv2 VPN for Windows 10 clients using PFSense. This is the link that I followed for doing so: https://doc.pfsense.org/index.php/IKEv2_with_EAP-MSCHAPv2 ...
0
votes
0answers
47 views

How to have multiple routes to the same remote VPN in pfSense?

We have a pfSense server in two offices. Our main office has a VPN server configured, and our satellite office has a VPN client configured, using the IP 123.156.88.253 (just an example). We have just ...
0
votes
0answers
20 views

pfSense LAN Configuration

I bougth a new pfSense router, I have 3 ports, WAN, LAN and DMZ. WAN -> I pluged in my WAN cable, it does work fine, via WLAN My goal is: LAN -> Switch -> Printer, PC, NAT, etc WLAN -> mobile ...
0
votes
0answers
123 views

Can't access pfSense web interface via IPSec VPN unless a device is connected to LAN?

I have a pfSense firewall (Netgate SG-1000) IPSec'd to a SonicWall. It seems like the IPSec VPN is working well, but only when a device is connected to the pfSense LAN. My understanding is that I ...
0
votes
0answers
456 views

pfsense squid SSL_ERROR_RX_RECORD_TOO_LONG

I have pfsense running squid proxy and squid guard. It was working like charm until few days ago, after that all https traffic started to give the below error SSL_ERROR_RX_RECORD_TOO_LONG. I have ...
0
votes
0answers
103 views

Load balance incoming and outcoming requests using pfsense?

I would like to load balance incoming requests using pfsense, is the use of 2 pfsense and pfsync along side dns round Robin possible for that? Also, how could I be able to load balance outcoming ...
0
votes
1answer
159 views

pfsense: dynamic dns doesn't update automaticaly - it knows it's outdated

I'm using dyndns with pfsense and I have a router connected on the WAN line (DHCP configuration). Every few days my ISP changes my IP and pfsense fails to update it automatically. If I open the WebUI ...
2
votes
1answer
140 views

How to prevent clients from getting static IPs (set by Client Specific Overrides) in OpenVPN via PfSense?

I am getting problems with the current setting in an OpenVPN via PfSense. The situation is the following: I have created a OpenVPN server in the network 192.168.222.0/24; Created two client ...
0
votes
0answers
115 views

Configuring UniFi APs on VLAN with pfSense router, Cisco switch and Allied Telesis switch

We are trying to deploy 10 UniFi AP-AC-LRs in our network and need some assistance. Below I will try to give a precise overview of both our setup and our goal. Please ask questions if anything is ...
3
votes
1answer
106 views

How to add custom xinetd Service in pfSense

On a pfSense 2.4, I installed a custom xinetd service. I appended the necessary line to the list in /etc/services and wrote a stanza in /var/etc/xinetd.conf. After reloading xinetd, the service runs ...
0
votes
0answers
59 views

pfsense in a VM but host has containers

So I want to transition from my Netgear R6400 router to a pfsense router in a VM. The problem is, how do I set it up such that my host is still network accessible, as well as the LXD containers on ...
0
votes
0answers
423 views

Can't connect to openVPN Server (pfsense)

i have some problems connecting to openvpn server with pfsense. For my tests i got 2 network interfaces both on my pfsense openvpn server and my windows 10 openvpn client. On my pfsense i have 1 ...
0
votes
0answers
39 views

setup NAT on PFSense single NIC on google cloud

im able to bring a pfsense vm up in single nic mode and complete the webconfigurator wizard. ive setup the other instances to send traffic to the pfsense vm as a default route. im lost on how to setup ...
0
votes
1answer
277 views

Can't access web server behind pfSense using second public IP

I have a /29 block of static IPs, one of which I have assigned to a web server on the LAN using VIP, NAT, Rules. Firewall logs show data is being passed successfully to the server, I don't see any ...
0
votes
0answers
90 views

Pfsense OpenVPN server to client traffic

I have a single pfsense OpenVPN server and two pfsense OpenVPN clients. I need the server LAN to be able to access the client LANs only. Tunnel: 10.0.8.0/24 Server LAN: 192.168.1.0/24 Client1 LAN: ...
0
votes
0answers
33 views

KVM: Host has 2 IP addresses on isolated network

I set up a machine with Ubuntu 16.04 and KVM running a couple of VMs. I created a virtual network (virbr1) which is supposed to connect some of the VMs so I added this network to those. One of them is ...
1
vote
1answer
182 views

pfSense and ESXI WAN

Please bare with me as I explain my issue. I have a dedicated server which came with ESXI 6.5 pre-installed. There is just one IP dedicated to this, the management IP: 62.121.90.xx/27 from where I ...
0
votes
0answers
22 views

Best method --if any— to proxy web traffic through domain controller

I've (our tiny group) been using the naked domain for Active Directory for quite a while now, at the beginning we knew it wouldn't be available for other uses without heavy setup. At the time it ...
1
vote
0answers
577 views

Squid with AD groups + Kerberos authentication in pfsense?

I followed steps found on the link: https://journeyofthegeek.com/2017/12/30/pfsense-squid-kerberos/ And the kerberos authentication without AD group membership restriction works very well, but I don'...
0
votes
0answers
33 views

In pfsense arp entries are not populating in arp table for some host machines

In pfsense arp entries are not populating in "arp table" for some host machines. due to which internet is not working on host,which have dhcp assigned ip address. when I give a static IP address to ...
0
votes
0answers
63 views

VLANs, FreeIPA, and AD trust on different subnets - how do the computers see each another?

Let me preface this by saying I am completely unfamiliar with VLAN tagging. I understand the basic concept, but I lack any sort of real-world experience. I am looking into installing FreeIPA for a ...
0
votes
0answers
201 views

Pfsense access to IPSEC tunnels from OpenVPN

I have 4 Pfsense instances on different physical locations like 2 offices and 2 data centers connected via IPSEC tunnels between each other and all works well if I'm connected wired from any of these ...
0
votes
0answers
316 views

Pfsense Squid AD auto authentication

So I have pfsense configured as a transparent bridge and have implemented Squid as a transparent proxy, I would like to move the squid authentication over to my AD domain controller. I have seen many ...
0
votes
1answer
25 views

How to route default destination not via VPN tunnel?

There a millions of sites which describe how to configure the network routing to send all traffic through the VPN tunnel. However, what is the exact opposite? There is an OpenVPN server configured on ...
0
votes
0answers
19 views

pfsense stops SSL cert negotiation for webserver

I have a web server sitting behind pfsense with port forwarding enable for port 443 against the webserver IP. When I try tor each the server, I can see SYN, SYN/ACK,ACK however when the client tries ...
0
votes
0answers
190 views

Pfsense transparent vlan trunk

So I have a pfsense transparent firewall, between my cisco router and first switch both the switch and router interfaces facing the pfsense are trunk ports: CISCO ROUTER - 10.10.1.253 ↓ PFSENSE - ...
1
vote
0answers
46 views

Clients not authenticating with Domain Controller via WiFi (Server 2016, UniFi)

I run a bit of a complicated setup, let me give you a quick rundown: Local pfSense Firewall -> IPSec Tunnel to AWS -> Server 2016 DC. pfSense runs DNS in the local network, forwards domain queries ...
0
votes
0answers
184 views

Ipsec vpn between Watchguard M300 to pfsense 2.3.4

I have an IPSEC tunnel mounted between a M300 watchguard and a pfsense version 2.3.4. Site A: 10.0.0.0/20 Site A Wireless: 192.168.8.0/26 Site B: 192.168.3.0/24 The IPSEC tunnel works very well ...