0

Background: I've recently setup my Cable router in Bridged mode to use Pfsense for OpenVPN and some other features at my house. Once my modems in bridged mode I can only have 1 port connected. So without having another Gbit switch around, I figured I could add a 4 Port HP Intel NIC to my pfsense box and use it similarly to my old setup. This proved to be problematic.

  • PF Sense Box

    • Onboard Nic [em4] Set as DHCP to Modem. Bridged mode tested working by my laptop.

    • HP Nic

      • [em0] OPT1
      • [em1] OPT2
      • [em2] OPT3
      • [em3] LAN (first port on the card) 192.168.2.0/24

My goal is to Have all Ports on the HP Nic act as a bridge/switch like they did on my modem.

On first Setup: Wan port received its Public facing IP address ok and default rules worked for LAN. So with my laptop wired to LAN everything is a Go. with OPT ports not working as expected.

I enabled all OPT interfaces and set their IPv4 Configuration Type to None as mentioned in the bridge guide.
I added the OPT and Lan interfaces to the bridge0 here: Interfaces > (assign)

Under System > Advanced on the System Tunables I set: net.link.bridge.pfil_member 0 net.link.bridge.pfil_bridge 1

For the firewall rules I left OP's blank as I assumed from a guide they would inherit settings from LAN as being set on the bridge. But I have played around with so many firewall settings that I'm not even sure of what to post here for the question. But I've tried setting up default allow all rules for each.

So far I just can't seem to get DCHP connected to OPT's to work. If I set my clients to static I can access the pfsense box. I noticed also that I can communicate with another system via static IP if both are set on different OPT connections. so I guess the bridge is working to some extent. I can also use nslookup with my system set on an opt port with a static IP set but I can't access the web. so it's resolving dns names, but still not allowing traffic. I must be missing some documentation on setting up the rules with a bridged configuration.

Any advice? anyone done it before?

vanic
  • 33
  • 1
  • 4

1 Answers1

0

you want: Each OPT is a different network (VLAN) but leaving by the same port Internet? .. If?.. valid and that the firewall allows navigation for each OPT? (review in the rules, the name OPT)