[pfSense Support] openvpn tunnel using public ip's from 1 side

2008-04-01 Thread Chris Flugstad
So I have a scenario that I wanna run by all you gurus. In my colo, where I have lots of public IPs, and my openvpn server, id like to use these ip's at a remote location on the other end of a vpn tunnel. so basically, at the remote end, it would be as if they wer in my colo. has anyone done thi

Re: [pfSense Support] problem report with default routes

2008-04-01 Thread Chris Buechler
Randy Schultz wrote: Ah. Now I remember why I used the LAN i'face instead of the WAN i'face - because the WAN is DHCP only whereas with the LAN I can set the static address. You can configure a static IP on the WAN. In fact you have to configure the IP on the WAN in this case, because that's

RE: [pfSense Support] ICMP not Replying on Virtual IPs

2008-04-01 Thread Ron Lemon
Hi Gary, My virtual Ips are of type Other not ProxyARP (unless other is another type of ProxyARP). When I try and convert one of them to Carp it tells me I have to put in a password so I do. Then it tells me that it can not locate an interface with a matching subnet for IP/32. It says I have to

RE: [pfSense Support] ICMP not Replying on Virtual IPs

2008-04-01 Thread Ron Lemon
Hi Tim, I am using port forward. Right now I am forwarding a TCP port (lets say 3389 for RDP) to the internal server and I have a rule setup for that and it works perfect. What packets are you suggesting I am to forward? There is no forward rule for ICMP. Thanks.

Re: [pfSense Support] CARP

2008-04-01 Thread Anil Garg
Bill Thanks for correcting. I am quite green on this stuff and as they say little knowledge is dangerous! Load balance built in is a great idea. I will test that out too... Bill Marquette <[EMAIL PROTECTED]> wrote: On Tue, Apr 1, 2008 at 9:44 AM, Anil Garg wrote: > However most examples are

Re: [pfSense Support] CARP

2008-04-01 Thread Bill Marquette
On Tue, Apr 1, 2008 at 9:44 AM, Anil Garg <[EMAIL PROTECTED]> wrote: > However most examples are for WAN side traffic and for keeping internet > alive. I will keep trying to find something that shows how servers can be > balanced. If balancing is what you need, then use the load balancer built in

Re: [pfSense Support] CARP

2008-04-01 Thread Gary Buckmaster
Then David is right, you want load balancing, not CARP high availability. Look at the pfSense documentation for load balancing. -Gary Anil Garg wrote: Thanks David and Thanks Gary. I spent a lot of time reading and a few things are somewhat becoming clear.. CARP uses a trusted (preferably

Re: [pfSense Support] CARP

2008-04-01 Thread Anil Garg
Thanks David and Thanks Gary. I spent a lot of time reading and a few things are somewhat becoming clear.. CARP uses a trusted (preferably dedicated) link to send heartbeat signals to keep who is alive. This common knowledge enables some pfsense to stay inactive (to either act as dhcp server o

Re: [pfSense Support] CARP

2008-04-01 Thread Gary Buckmaster
Anil Garg wrote: I have seen some documentation that shows how two pfsense can act as back up to the other (hot standby).. Is it possible for servers behind pfsense to exploit the same capability? Say we have one www.server on lan or dmz. If this server to die, we want the system to point t

Re: [pfSense Support] CARP

2008-04-01 Thread David Rees
On Mon, Mar 31, 2008 at 11:40 PM, Anil Garg <[EMAIL PROTECTED]> wrote: > Say we have one www.server on lan or dmz. If this server to die, we want > the system to point to another www.server on the same subnet. Yes, you can do this with the Load Balancing feature. -Dave -

Re: [pfSense Support] PPPoE gets disconnected on WAN port

2008-04-01 Thread Olivier Mueller
On Tue, 2008-04-01 at 08:46 +0200, Olivier Mueller wrote: > pfSense Version: 1.2-Release. Still looking for a solution too... :) > Activated syslog to a remote pc to be able to debug this problem if > it occurs again today. Et voila, it just happened again: Apr 1 08:39:34 gw kernel: pflog0: