[pfSense] Bundling multiple OVPN client connection into one fat pipe...

2015-03-30 Thread Tiernan OToole
Morning all.. Stupid(ish) question for you... I have a PFSense box in the house with 3 internet connections (2x240/24 cable modems and a 70ish/20mb VDSL line). I am wondering if i setup 3 OVPN connections to a single (large) Cloud or Dedicated box, can I bundle the 3 connections into a singl

[pfSense] GRE between 2 pfsense boxes

2015-03-30 Thread Abid khan
Hi, I am trying to implement a GRE tunnel over 2 publc WAN addresses, unfortunalty i cannot find a guide /howto- for the same. can someone please point me to a guide which i can replicate. thanks rgds Abid Sent from my VEGA___ pfSense mailing list ht

Re: [pfSense] GRE between 2 pfsense boxes

2015-03-30 Thread Kevin Tollison
Would OpenVPN not be a better solution? Any constraints limiting you to GRE? On Mon, Mar 30, 2015, 6:09 AM Abid khan wrote: > Hi, > > I am trying to implement a GRE tunnel over 2 publc WAN addresses, > unfortunalty i cannot find a guide /howto- for the same. > > can someone please point me to a

Re: [pfSense] GRE between 2 pfsense boxes

2015-03-30 Thread Adam Thompson
Performance and flexibility. OpenVPN is good at getting unicast IP traffic from A to B, but it's difficult to, say, run OSPF over it. It also need ridiculous amounts of CPU time to encrypt, especially painful in situations that don't need encryption. So, yeah, there are a LOT of use cases wher

[pfSense] Assign IP Address with /32 Mask on WAN Interface

2015-03-30 Thread day knight
Hello All: I see the configuration script doesn't allow you to pick /32 address when configuring an interface as my default gateway is not in the same subnet. I have limited IPs and run pfsense from vmware. How can i override and assign /32 ip address to wan interface. I have done this in other l

Re: [pfSense] Assign IP Address with /32 Mask on WAN Interface

2015-03-30 Thread Vick Khera
On Sat, Mar 28, 2015 at 11:42 AM, day knight wrote: > I see the configuration script doesn't allow you to pick /32 address when > configuring an interface as my default gateway is not in the same subnet. I > have limited IPs and run pfsense from vmware. How can i override and assign > /32 ip addr

Re: [pfSense] GRE between 2 pfsense boxes

2015-03-30 Thread Abid khan
GRE tunnels will not just between 2 pfsense units but also my juniper and cisco sites as well..which is the main reason why i dont want to start off with openvpn. Sent from my VEGA Original Message Subject: Re: [pfSense] GRE between 2 pfsense boxesFrom: Adam Thompson Date: Mon, 2

[pfSense] strange ntpd behavior

2015-03-30 Thread Vick Khera
Given two firewall servers, A (primary) and B (failover) both running ntpd service available to clients on the LAN. pfSense 2.2.1/amd64 on pfSense branded C2758. The following procedure more or less causes ntpd on B to become unstable: 1) on A, set CARP maintenance mode to make B answer all CARP

Re: [pfSense] Assign IP Address with /32 Mask on WAN Interface

2015-03-30 Thread WebDawg
On Mon, Mar 30, 2015 at 6:14 AM, Vick Khera wrote: > > On Sat, Mar 28, 2015 at 11:42 AM, day knight wrote: > >> I see the configuration script doesn't allow you to pick /32 address when >> configuring an interface as my default gateway is not in the same subnet. I >> have limited IPs and run pfs

Re: [pfSense] Bundling multiple OVPN client connection into one fat pipe...

2015-03-30 Thread WebDawg
On Mon, Mar 30, 2015 at 3:01 AM, Tiernan OToole wrote: > Morning all.. > > > Stupid(ish) question for you... > > > I have a PFSense box in the house with 3 internet connections (2x240/24 > cable modems and a 70ish/20mb VDSL line). I am wondering if i setup 3 OVPN > connections to a single (lar

Re: [pfSense] Assign IP Address with /32 Mask on WAN Interface

2015-03-30 Thread Walter Parker
A /32 net mask is not used for used for regular routing interfaces. It has a specialized use, usually used for virtual interfaces. On a Cisco router, it would be used for a loopback interface. It is sometimes used as the subnet mask for an IP alias address on host systems (where all routing is done

Re: [pfSense] GRE between 2 pfsense boxes

2015-03-30 Thread Abid khan
Update: I have set up the appropriate rules for iskamp gre and esp, however got stuck on GRE interface. I have defind remote and local gre addresses as my lan IPs but doesnt seem like i can pass any traffic thru the wans. any pointers please? thanks Sent from my VEGA Original Message -

Re: [pfSense] Assign IP Address with /32 Mask on WAN Interface

2015-03-30 Thread Adam Thompson
Sadly, I know several xDSL providers who offer a default gateway not in the client's subnet. (LOL: my phone auto-corrected "subnet" to "fuckety". No kidding.) Linux and Windows and MacOS can deal with this level of brain-deadness, *BSD cannot. However, the good news is that if your network is

Re: [pfSense] Assign IP Address with /32 Mask on WAN Interface

2015-03-30 Thread David Burgess
On Mar 30, 2015 11:53 AM, "WebDawg" wrote: >> > > Your default gateway HAS to be on the same subnet. > My ISP assigns me a /32 WAN address and a gateway on another subnet via pppoe. It hasn't been an issue. I've never tried self-assigning a /32 to an interface in pfSense, however. db __

Re: [pfSense] GRE between 2 pfsense boxes

2015-03-30 Thread Chris Buechler
On Mon, Mar 30, 2015 at 6:40 AM, Adam Thompson wrote: > OpenVPN is good at getting unicast IP traffic from A to B, but it's difficult > to, say, run OSPF over it. There are reasons, but that's not one of them. Lots of people run OSPF over OpenVPN. ___

[pfSense] pfSense as GUI and stripped OS for dedicated Cacheing name server

2015-03-30 Thread Scott Lambert
I remember seeing something years ago about the ability to use pfSense as an appliance to run a dedicated process. I think the post was specifically about running a name server. My search-fu is not great enough to locate the post/thread I think I remember. Nor is it good enough to find any recen