0

I have a machine with four NICs (physical ethernet ports) and I'd like to set up a fully updated pfSense on it. So far it looks like this:

enter image description here

enter image description here

A few things I've done so far:

  1. I've set up the bridge ("BRIDGE (opt3)") to include LAN0, LAN1, and LAN2.

  2. The Internet connection is plugged into WAN (em0).

  3. I've added a firewall rule where all source "bridge net" traffic is passed to destination "bridge net".

  4. All interfaces are active.

  5. LAN0 is currently set to static IPv4 with IP 10.0.3.1.

  6. DHCP server is active on LAN0.

If I plug a device into LAN0, the device is assigned an IP (such as 10.0.3.2) and can access the pfSense web interface at 10.0.3.1.

But if I plug into and of the other LAN* ports, my device isn't even assigned an IP, and can't see/access anything.

What I want in the end is:

  1. Devices connected on LAN* can all connect to and interact with each other.

  2. All of these devices have Internet access via WAN.

  3. pfSense acts as a firewall and NAT between WAN and all the LAN* interfaces.

  4. pfSense runs a DHCP server to assign IPv4 IPs to all devices connected on LAN* in the same subnet i.e. 10.0.3.*.

What else do I need to do? Do I need to set up more firewall rules? Or something I need to do to set up the DHCP server? Is the bridge set up correctly?

hpy
  • 835
  • 3
  • 18
  • 28

1 Answers1

2

Here is a really good guide. But it basically boils down to give your bridge its ip address. Remove the lan0 ip. Then setup an group that includes your ports. Firewall rules for the bridge group and then services(dhcp and dns come to mind)

alexander.polomodov
  • 1,060
  • 3
  • 10
  • 14
deboerdn2000
  • 36
  • 2