Re: [pfSense Support] Trouble accessing console via serial connection

2006-08-03 Thread Charles Sprickman

On Thu, 3 Aug 2006, Jonathan Wanak wrote:

I see the pfSense boot-up and shut-down messages in HyperTerminal. 
However, once I get to the line "Bootup complete" I can't seem to do 
anything.  I was expecting to see the main console screen at this point, 
but nothing further appears.  When I reboot via the web configurator, I 
see the shutdown messages in HyperTerminal.


It sounds like the console is being set to the serial port (look in 
/boot.config), but that no getty is being spawned on the console.  To make 
it "just work" for now, manually edit /etc/ttys and stick something like 
this on the proper serial line:


ttyd0   "/usr/libexec/getty std.9600" vt102   on secure

Then "kill -HUP 1" to have the file re-read.

Charles


Thanks,

Jon

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]




-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



[pfSense Support] Trouble accessing console via serial connection

2006-08-03 Thread Jonathan Wanak
Hi,
 
I'm trying to get the serial console to work.  I'm running pfSense RC2, on the 
hard drive on a PII Dell Optiplex, connected to my Windows XP machine with a 
null modem cable.  Connection settings are 9600/8/N/1/HW handshaking.  I have 
verified 2-way communication between the firewall box and the XP machine ('echo 
"xx" > ttyxx' appears in HT; 'more ttyxx' displays text typed into HT), and 
disconnected the keyboard, mouse, and monitor from the router.  Here's my 
problem:
 
I see the pfSense boot-up and shut-down messages in HyperTerminal.  However, 
once I get to the line "Bootup complete" I can't seem to do anything.  I was 
expecting to see the main console screen at this point, but nothing further 
appears.  When I reboot via the web configurator, I see the shutdown messages 
in HyperTerminal.  I've tried TTY, VT100, ANSI, and auto emulation modes.  I've 
also tried playing around with the flow control settings, but haven't seen any 
difference.  I'm guessing I have some kind of terminal misconfiguration, but 
don't know where to go from here.
 
Any help would be greatly appreciated.
 
Thanks,
 
Jon

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



RE: [pfSense Support] USP & NAT Reflection

2006-08-03 Thread alan walters








Same here have ired this forsome time with
no success

 









From: Rob Terhaar
[mailto:[EMAIL PROTECTED] 
Sent: 02 August 2006 18:35
To: support@pfsense.com
Subject: Re: [pfSense Support] USP
& NAT Reflection



 

 



On 8/1/06, Scott
Ullrich <[EMAIL PROTECTED]>
wrote:

On 8/2/06, Tim Roberts
<[EMAIL PROTECTED]> wrote:
> Yes I have the NAT reflection box unchecked. Have you tested reflection
with
> UDP yet? I just upgraded to RC2 and have the same issue. I have tried 
> removing the forwarding and adding it back in case something is getting
> mangled between versions now.

I have not tested UDP, only TCP.   Anyone else with problems with UDP
reflection?

Scott 




confirmed, UDP reflection is not working for my DNS lookups ether:

dig @  google.com
(nothing)

dig +tcp @< my.external.facing.dns.ip>  google.com
(good results)











Re: [pfSense Support] End of Hackatron ?

2006-08-03 Thread Scott Ullrich

On 8/3/06, Holger Goetz <[EMAIL PROTECTED]> wrote:


 Hi Scott & dev team,

 may be somewhat off topic in a certain sense but possibly of interest to
more people (or i simply missed something here):

 Did you finish your hackatron by now and by releasing RC2? Or are we
expecting further bunch of fixes in the nearer future due to "heavy
development" during the hackatron?  By browsing through the typical places
(Blog, website, mail archive) i wasn't able to find any info...


We will be posting a wrapup blog post soon.   All of us have been
extremely busy with RC2.

Scott

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



[pfSense Support] End of Hackatron ?

2006-08-03 Thread Holger Goetz




Hi Scott & dev team,

may be somewhat off topic in a certain sense but possibly of interest to more people (or i simply missed something here):

Did you finish your hackatron by now and by releasing RC2? Or are we expecting further bunch of fixes in the nearer future due to "heavy development" during the hackatron?  By browsing through the typical places (Blog, website, mail archive) i wasn't able to find any info...

Thanks,
Holger






Re: [pfSense Support] Bridged Multi-Wan Load Balancing Failover

2006-08-03 Thread Rainer Duffner

Scott Williamson schrieb:

Next Question, has anyone had experiences running pfsense on Sun X2100
Servers?

  


It should work. (FreeBSD i386).
I run FreeBSD 6.1 on the Tyan GT20 NForce barebone, a "cousin" of the X2100.

Note that my GT20 allowed me to install a 3Ware RAID-card instead of the 
included Nfore RAID - the X2100 only has one PCIe slot, IIRC.




cheers,
Rainer

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [pfSense Support] Bridged Multi-Wan Load Balancing Failover

2006-08-03 Thread Gary Buckmaster

Scott Ullrich wrote:

On 8/3/06, Gary Buckmaster <[EMAIL PROTECTED]> wrote:

Aren't those Opteron based?  If so, then you're out of luck, because
pfSense is currently not an x64 platform.


Opterons will run just fine on 32 bit as well as 64 bit.  One of our
builder servers is a dual Opteron.

Scott

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

My mistake.  String me up. 


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [pfSense Support] Bridged Multi-Wan Load Balancing Failover

2006-08-03 Thread Scott Ullrich

On 8/3/06, Gary Buckmaster <[EMAIL PROTECTED]> wrote:

Aren't those Opteron based?  If so, then you're out of luck, because
pfSense is currently not an x64 platform.


Opterons will run just fine on 32 bit as well as 64 bit.  One of our
builder servers is a dual Opteron.

Scott

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



RES: [pfSense Support] Bridged Multi-Wan Load Balancing Failover

2006-08-03 Thread Pedro Paulo de Magalhaes Oliveira Junior
I run pfsense in Sun Ultra20

-Mensagem original-
De: Gary Buckmaster [mailto:[EMAIL PROTECTED] 
Enviada em: quinta-feira, 3 de agosto de 2006 13:39
Para: support@pfsense.com
Assunto: Re: [pfSense Support] Bridged Multi-Wan Load Balancing Failover

Aren't those Opteron based?  If so, then you're out of luck, because 
pfSense is currently not an x64 platform. 

-Gary

Scott Williamson wrote:
> Next Question, has anyone had experiences running pfsense on Sun X2100
> Servers?
>
> Regards
>
> There are 10 types of people in this world, those who can read binary,
> and those who cannot.
>
> -Original Message-
> From: Holger Bauer [mailto:[EMAIL PROTECTED] 
> Sent: Thursday, August 03, 2006 9:56 AM
> To: support@pfsense.com
> Subject: RE: [pfSense Support] Bridged Multi-Wan Load Balancing Failover
>
> Not only that bridging won't work for CARP it won't work with
> policybased routing (as the name already says) and/or loadblalancing
> either. How many public IPs do your T1s have? You need at least 3 IPs at
> each T1 that you can use to set up CARP correctly. The subnet between
> the pfSenses and the ASA shouldn't be the problem. Just use a subnet
> that is not used anywhere else in your local network (LAN, DMZ, remote
> VPN LANs, ...). Btw, you'll have some problems using 1:1 NAT for this
> kind of setup as you can't 1:1 NAT the same IP (of the ASA) to different
> WANs (that would be 2:1 what is not possible). You need to go along with
> portforwards at WAN and at WAN2 to the ASA. Then the state will handle
> which is the right interface to send out the reply.
>
> Holger
>
>
>
>   
>> -Original Message-
>> From: Scott Williamson [mailto:[EMAIL PROTECTED]
>> Sent: Thursday, August 03, 2006 4:46 PM
>> To: support@pfsense.com
>> Subject: RE: [pfSense Support] Bridged Multi-Wan Load 
>> Balancing Failover
>>
>>
>> 1:1 Nat Accept ALL:ALL?
>>
>> There are 10 types of people in this world, those who can read binary,
>> and those who cannot.
>> -Original Message-
>> From: Gary Buckmaster [mailto:[EMAIL PROTECTED] 
>> Sent: Thursday, August 03, 2006 9:44 AM
>> To: support@pfsense.com
>> Subject: Re: [pfSense Support] Bridged Multi-Wan Load 
>> Balancing Failover
>>
>> Scott,
>>
>> Bridging and CARP don't play nicely together, so you're going 
>> to have to
>>
>> go another route. 
>>
>> -Gary
>>
>> Scott Williamson wrote:
>> 
>>> Ok so here is the question, I have 2 Wan Links Sprint 3MB connection
>>>   
>> and
>> 
>>> Verizon 1.5 MB connection.  I am wanting to Load Balance across both
>>> connections and use a secondary pfsense firewall for failover.  The
>>> company I work for mad a sizeable investment in 2 Cisco ASA 5520's
>>>   
>> that
>> 
>>> we are throwing into the picture as well.  Here is a rough 
>>>   
>> diagram of
>> 
>>> what I would like to do:
>>>
>>>
>>> Sprint T1's||Verizon T1
>>>  |  |
>>>  ||
>>> PFSENSE Main - Standby PFSENSE
>>>   |
>>>   |
>>>ASA 5520  -  Standby 5520
>>>  |  |   |
>>> DMZLAN   DMZ2
>>>
>>>
>>> I am just wanting to bridge all traffic and the external 
>>>   
>> IP's through
>> 
>>> the PFSENSE and allow the ASA 5520's to do the firewalling and VPN.
>>>   
>> Is
>> 
>>> this possible or is there a better soulution?
>>>
>>> Regards,
>>> Scott Williamson
>>>
>>>
>>> There are 10 types of people in this world, those who can 
>>>   
>> read binary,
>> 
>>> and those who cannot.
>>>
>>>
>>> DISCLAIMER:
>>>
>>> This e-mail is only intended for the person(s) to whom it 
>>>   
>> is addressed
>> and may contain confidential information. If you have received this
>> e-mail in error, please notify us immediately by reply e-mail and then
>> delete this message from your system. Please do not copy it or use it
>> for any purposes, or disclose its contents to any other person without
>> the consent of the sender. Unless expressly stated herein to the
>> contrary, only agreements in writing, signed by an authorized 
>> officer of
>> the Company, may be enforced against it.
>> 
>>>
>>>
>>>   
>> -
>> 
>>> To unsubscribe, e-mail: [EMAIL PROTECTED]
>>> For additional commands, e-mail: [EMAIL PROTECTED]
>>>
>>>   
>>>   
>> -
>> To unsubscribe, e-mail: [EMAIL PROTECTED]
>> For additional commands, e-mail: [EMAIL PROTECTED]
>>
>>
>> -
>> To unsubscribe, e-mail: [EMAIL PROTECTED]
>> For additional commands, e-mail: [EMAIL PROTECTED]
>>
>>
>> 
>
> -
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
>
>
> -

Re: [pfSense Support] Bridged Multi-Wan Load Balancing Failover

2006-08-03 Thread Gary Buckmaster
Aren't those Opteron based?  If so, then you're out of luck, because 
pfSense is currently not an x64 platform. 


-Gary

Scott Williamson wrote:

Next Question, has anyone had experiences running pfsense on Sun X2100
Servers?

Regards

There are 10 types of people in this world, those who can read binary,
and those who cannot.

-Original Message-
From: Holger Bauer [mailto:[EMAIL PROTECTED] 
Sent: Thursday, August 03, 2006 9:56 AM

To: support@pfsense.com
Subject: RE: [pfSense Support] Bridged Multi-Wan Load Balancing Failover

Not only that bridging won't work for CARP it won't work with
policybased routing (as the name already says) and/or loadblalancing
either. How many public IPs do your T1s have? You need at least 3 IPs at
each T1 that you can use to set up CARP correctly. The subnet between
the pfSenses and the ASA shouldn't be the problem. Just use a subnet
that is not used anywhere else in your local network (LAN, DMZ, remote
VPN LANs, ...). Btw, you'll have some problems using 1:1 NAT for this
kind of setup as you can't 1:1 NAT the same IP (of the ASA) to different
WANs (that would be 2:1 what is not possible). You need to go along with
portforwards at WAN and at WAN2 to the ASA. Then the state will handle
which is the right interface to send out the reply.

Holger



  

-Original Message-
From: Scott Williamson [mailto:[EMAIL PROTECTED]
Sent: Thursday, August 03, 2006 4:46 PM
To: support@pfsense.com
Subject: RE: [pfSense Support] Bridged Multi-Wan Load 
Balancing Failover



1:1 Nat Accept ALL:ALL?

There are 10 types of people in this world, those who can read binary,
and those who cannot.
-Original Message-
From: Gary Buckmaster [mailto:[EMAIL PROTECTED] 
Sent: Thursday, August 03, 2006 9:44 AM

To: support@pfsense.com
Subject: Re: [pfSense Support] Bridged Multi-Wan Load 
Balancing Failover


Scott,

Bridging and CARP don't play nicely together, so you're going 
to have to


go another route. 


-Gary

Scott Williamson wrote:


Ok so here is the question, I have 2 Wan Links Sprint 3MB connection
  

and


Verizon 1.5 MB connection.  I am wanting to Load Balance across both
connections and use a secondary pfsense firewall for failover.  The
company I work for mad a sizeable investment in 2 Cisco ASA 5520's
  

that

we are throwing into the picture as well.  Here is a rough 
  

diagram of


what I would like to do:


Sprint T1's||Verizon T1
 |  |
 ||
PFSENSE Main - Standby PFSENSE
  |
  |
   ASA 5520  -  Standby 5520
 |  |   |
DMZLAN   DMZ2


I am just wanting to bridge all traffic and the external 
  

IP's through


the PFSENSE and allow the ASA 5520's to do the firewalling and VPN.
  

Is


this possible or is there a better soulution?

Regards,
Scott Williamson


There are 10 types of people in this world, those who can 
  

read binary,


and those who cannot.


DISCLAIMER:

This e-mail is only intended for the person(s) to whom it 
  

is addressed
and may contain confidential information. If you have received this
e-mail in error, please notify us immediately by reply e-mail and then
delete this message from your system. Please do not copy it or use it
for any purposes, or disclose its contents to any other person without
the consent of the sender. Unless expressly stated herein to the
contrary, only agreements in writing, signed by an authorized 
officer of

the Company, may be enforced against it.




  

-


To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

  
  

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]





-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

  



-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



RE: [pfSense Support] Bridged Multi-Wan Load Balancing Failover

2006-08-03 Thread Scott Williamson
Next Question, has anyone had experiences running pfsense on Sun X2100
Servers?

Regards

There are 10 types of people in this world, those who can read binary,
and those who cannot.

-Original Message-
From: Holger Bauer [mailto:[EMAIL PROTECTED] 
Sent: Thursday, August 03, 2006 9:56 AM
To: support@pfsense.com
Subject: RE: [pfSense Support] Bridged Multi-Wan Load Balancing Failover

Not only that bridging won't work for CARP it won't work with
policybased routing (as the name already says) and/or loadblalancing
either. How many public IPs do your T1s have? You need at least 3 IPs at
each T1 that you can use to set up CARP correctly. The subnet between
the pfSenses and the ASA shouldn't be the problem. Just use a subnet
that is not used anywhere else in your local network (LAN, DMZ, remote
VPN LANs, ...). Btw, you'll have some problems using 1:1 NAT for this
kind of setup as you can't 1:1 NAT the same IP (of the ASA) to different
WANs (that would be 2:1 what is not possible). You need to go along with
portforwards at WAN and at WAN2 to the ASA. Then the state will handle
which is the right interface to send out the reply.

Holger



> -Original Message-
> From: Scott Williamson [mailto:[EMAIL PROTECTED]
> Sent: Thursday, August 03, 2006 4:46 PM
> To: support@pfsense.com
> Subject: RE: [pfSense Support] Bridged Multi-Wan Load 
> Balancing Failover
> 
> 
> 1:1 Nat Accept ALL:ALL?
> 
> There are 10 types of people in this world, those who can read binary,
> and those who cannot.
> -Original Message-
> From: Gary Buckmaster [mailto:[EMAIL PROTECTED] 
> Sent: Thursday, August 03, 2006 9:44 AM
> To: support@pfsense.com
> Subject: Re: [pfSense Support] Bridged Multi-Wan Load 
> Balancing Failover
> 
> Scott,
> 
> Bridging and CARP don't play nicely together, so you're going 
> to have to
> 
> go another route. 
> 
> -Gary
> 
> Scott Williamson wrote:
> > Ok so here is the question, I have 2 Wan Links Sprint 3MB connection
> and
> > Verizon 1.5 MB connection.  I am wanting to Load Balance across both
> > connections and use a secondary pfsense firewall for failover.  The
> > company I work for mad a sizeable investment in 2 Cisco ASA 5520's
> that
> > we are throwing into the picture as well.  Here is a rough 
> diagram of
> > what I would like to do:
> >
> >
> > Sprint T1's||Verizon T1
> >  |  |
> >  ||
> > PFSENSE Main - Standby PFSENSE
> >   |
> >   |
> >ASA 5520  -  Standby 5520
> >  |  |   |
> > DMZLAN   DMZ2
> >
> >
> > I am just wanting to bridge all traffic and the external 
> IP's through
> > the PFSENSE and allow the ASA 5520's to do the firewalling and VPN.
> Is
> > this possible or is there a better soulution?
> >
> > Regards,
> > Scott Williamson
> >
> >
> > There are 10 types of people in this world, those who can 
> read binary,
> > and those who cannot.
> >
> >
> > DISCLAIMER:
> >
> > This e-mail is only intended for the person(s) to whom it 
> is addressed
> and may contain confidential information. If you have received this
> e-mail in error, please notify us immediately by reply e-mail and then
> delete this message from your system. Please do not copy it or use it
> for any purposes, or disclose its contents to any other person without
> the consent of the sender. Unless expressly stated herein to the
> contrary, only agreements in writing, signed by an authorized 
> officer of
> the Company, may be enforced against it.
> >
> >
> >
> > 
> -
> > To unsubscribe, e-mail: [EMAIL PROTECTED]
> > For additional commands, e-mail: [EMAIL PROTECTED]
> >
> >   
> 
> 
> -
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
> 
> 
> -
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
> 
> 

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



RE: [pfSense Support] Bridged Multi-Wan Load Balancing Failover

2006-08-03 Thread Holger Bauer
Not only that bridging won't work for CARP it won't work with policybased 
routing (as the name already says) and/or loadblalancing either. How many 
public IPs do your T1s have? You need at least 3 IPs at each T1 that you can 
use to set up CARP correctly. The subnet between the pfSenses and the ASA 
shouldn't be the problem. Just use a subnet that is not used anywhere else in 
your local network (LAN, DMZ, remote VPN LANs, ...). Btw, you'll have some 
problems using 1:1 NAT for this kind of setup as you can't 1:1 NAT the same IP 
(of the ASA) to different WANs (that would be 2:1 what is not possible). You 
need to go along with portforwards at WAN and at WAN2 to the ASA. Then the 
state will handle which is the right interface to send out the reply.

Holger



> -Original Message-
> From: Scott Williamson [mailto:[EMAIL PROTECTED]
> Sent: Thursday, August 03, 2006 4:46 PM
> To: support@pfsense.com
> Subject: RE: [pfSense Support] Bridged Multi-Wan Load 
> Balancing Failover
> 
> 
> 1:1 Nat Accept ALL:ALL?
> 
> There are 10 types of people in this world, those who can read binary,
> and those who cannot.
> -Original Message-
> From: Gary Buckmaster [mailto:[EMAIL PROTECTED] 
> Sent: Thursday, August 03, 2006 9:44 AM
> To: support@pfsense.com
> Subject: Re: [pfSense Support] Bridged Multi-Wan Load 
> Balancing Failover
> 
> Scott,
> 
> Bridging and CARP don't play nicely together, so you're going 
> to have to
> 
> go another route. 
> 
> -Gary
> 
> Scott Williamson wrote:
> > Ok so here is the question, I have 2 Wan Links Sprint 3MB connection
> and
> > Verizon 1.5 MB connection.  I am wanting to Load Balance across both
> > connections and use a secondary pfsense firewall for failover.  The
> > company I work for mad a sizeable investment in 2 Cisco ASA 5520's
> that
> > we are throwing into the picture as well.  Here is a rough 
> diagram of
> > what I would like to do:
> >
> >
> > Sprint T1's||Verizon T1
> >  |  |
> >  ||
> > PFSENSE Main - Standby PFSENSE
> >   |
> >   |
> >ASA 5520  -  Standby 5520
> >  |  |   |
> > DMZLAN   DMZ2
> >
> >
> > I am just wanting to bridge all traffic and the external 
> IP's through
> > the PFSENSE and allow the ASA 5520's to do the firewalling and VPN.
> Is
> > this possible or is there a better soulution?
> >
> > Regards,
> > Scott Williamson
> >
> >
> > There are 10 types of people in this world, those who can 
> read binary,
> > and those who cannot.
> >
> >
> > DISCLAIMER:
> >
> > This e-mail is only intended for the person(s) to whom it 
> is addressed
> and may contain confidential information. If you have received this
> e-mail in error, please notify us immediately by reply e-mail and then
> delete this message from your system. Please do not copy it or use it
> for any purposes, or disclose its contents to any other person without
> the consent of the sender. Unless expressly stated herein to the
> contrary, only agreements in writing, signed by an authorized 
> officer of
> the Company, may be enforced against it.
> >
> >
> >
> > 
> -
> > To unsubscribe, e-mail: [EMAIL PROTECTED]
> > For additional commands, e-mail: [EMAIL PROTECTED]
> >
> >   
> 
> 
> -
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
> 
> 
> -
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
> 
> 

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



RE: [pfSense Support] Bridged Multi-Wan Load Balancing Failover

2006-08-03 Thread Scott Williamson
1:1 Nat Accept ALL:ALL?

There are 10 types of people in this world, those who can read binary,
and those who cannot.
-Original Message-
From: Gary Buckmaster [mailto:[EMAIL PROTECTED] 
Sent: Thursday, August 03, 2006 9:44 AM
To: support@pfsense.com
Subject: Re: [pfSense Support] Bridged Multi-Wan Load Balancing Failover

Scott,

Bridging and CARP don't play nicely together, so you're going to have to

go another route. 

-Gary

Scott Williamson wrote:
> Ok so here is the question, I have 2 Wan Links Sprint 3MB connection
and
> Verizon 1.5 MB connection.  I am wanting to Load Balance across both
> connections and use a secondary pfsense firewall for failover.  The
> company I work for mad a sizeable investment in 2 Cisco ASA 5520's
that
> we are throwing into the picture as well.  Here is a rough diagram of
> what I would like to do:
>
>
> Sprint T1's|  |Verizon T1
>|  |
>||
> PFSENSE Main - Standby PFSENSE
>   |
>   |
>ASA 5520  -  Standby 5520
>|  |   |
>   DMZLAN   DMZ2
>
>
> I am just wanting to bridge all traffic and the external IP's through
> the PFSENSE and allow the ASA 5520's to do the firewalling and VPN.
Is
> this possible or is there a better soulution?
>
> Regards,
> Scott Williamson
>
>
> There are 10 types of people in this world, those who can read binary,
> and those who cannot.
>
>
> DISCLAIMER:
>
> This e-mail is only intended for the person(s) to whom it is addressed
and may contain confidential information. If you have received this
e-mail in error, please notify us immediately by reply e-mail and then
delete this message from your system. Please do not copy it or use it
for any purposes, or disclose its contents to any other person without
the consent of the sender. Unless expressly stated herein to the
contrary, only agreements in writing, signed by an authorized officer of
the Company, may be enforced against it.
>
>
>
> -
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
>
>   


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [pfSense Support] Bridged Multi-Wan Load Balancing Failover

2006-08-03 Thread Gary Buckmaster

Scott,

Bridging and CARP don't play nicely together, so you're going to have to 
go another route. 


-Gary

Scott Williamson wrote:

Ok so here is the question, I have 2 Wan Links Sprint 3MB connection and
Verizon 1.5 MB connection.  I am wanting to Load Balance across both
connections and use a secondary pfsense firewall for failover.  The
company I work for mad a sizeable investment in 2 Cisco ASA 5520's that
we are throwing into the picture as well.  Here is a rough diagram of
what I would like to do:


Sprint T1's||Verizon T1
 |  |
 ||
PFSENSE Main - Standby PFSENSE
  |
  |
   ASA 5520  -  Standby 5520
 |  |   |
DMZLAN   DMZ2


I am just wanting to bridge all traffic and the external IP's through
the PFSENSE and allow the ASA 5520's to do the firewalling and VPN.  Is
this possible or is there a better soulution?

Regards,
Scott Williamson


There are 10 types of people in this world, those who can read binary,
and those who cannot.


DISCLAIMER:

This e-mail is only intended for the person(s) to whom it is addressed and may 
contain confidential information. If you have received this e-mail in error, 
please notify us immediately by reply e-mail and then delete this message from 
your system. Please do not copy it or use it for any purposes, or disclose its 
contents to any other person without the consent of the sender. Unless 
expressly stated herein to the contrary, only agreements in writing, signed by 
an authorized officer of the Company, may be enforced against it.



-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

  



-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



[pfSense Support] Bridged Multi-Wan Load Balancing Failover

2006-08-03 Thread Scott Williamson
Ok so here is the question, I have 2 Wan Links Sprint 3MB connection and
Verizon 1.5 MB connection.  I am wanting to Load Balance across both
connections and use a secondary pfsense firewall for failover.  The
company I work for mad a sizeable investment in 2 Cisco ASA 5520's that
we are throwing into the picture as well.  Here is a rough diagram of
what I would like to do:


Sprint T1's||Verizon T1
 |  |
 ||
PFSENSE Main - Standby PFSENSE
  |
  |
   ASA 5520  -  Standby 5520
 |  |   |
DMZLAN   DMZ2


I am just wanting to bridge all traffic and the external IP's through
the PFSENSE and allow the ASA 5520's to do the firewalling and VPN.  Is
this possible or is there a better soulution?

Regards,
Scott Williamson


There are 10 types of people in this world, those who can read binary,
and those who cannot.


DISCLAIMER:

This e-mail is only intended for the person(s) to whom it is addressed and may 
contain confidential information. If you have received this e-mail in error, 
please notify us immediately by reply e-mail and then delete this message from 
your system. Please do not copy it or use it for any purposes, or disclose its 
contents to any other person without the consent of the sender. Unless 
expressly stated herein to the contrary, only agreements in writing, signed by 
an authorized officer of the Company, may be enforced against it.



-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]