+ Post New Thread
Page 2 of 6 FirstFirst 123456 LastLast
Results 16 to 30 of 90
Wired Networks Thread, Using Smoothwall Express With a Cisco Layer 3 Switch? in Technical; or you could have the PFS as the only thing plugged into the Cisco, and it's second interface connected to ...
  1. #16

    twin--turbo's Avatar
    Join Date
    Jun 2012
    Location
    Carlisle
    Posts
    2,334
    Thank Post
    1
    Thanked 381 Times in 340 Posts
    Rep Power
    150
    or you could have the PFS as the only thing plugged into the Cisco, and it's second interface connected to a switch for the BYOD. Then all traffic would travers the PF

    Rob

  2. #17

    FN-GM's Avatar
    Join Date
    Jun 2007
    Location
    UK
    Posts
    16,227
    Thank Post
    893
    Thanked 1,776 Times in 1,532 Posts
    Blog Entries
    12
    Rep Power
    461
    Quote Originally Posted by cpjitservices View Post
    Just set pfsense as your default gateway.
    Then the switch wont route between other vlans.

    Quote Originally Posted by twin--turbo View Post
    or you could have the PFS as the only thing plugged into the Cisco, and it's second interface connected to a switch for the BYOD. Then all traffic would travers the PF

    Rob
    When the time comes we wont be using a free product for the firewall.

  3. #18

    twin--turbo's Avatar
    Join Date
    Jun 2012
    Location
    Carlisle
    Posts
    2,334
    Thank Post
    1
    Thanked 381 Times in 340 Posts
    Rep Power
    150
    Quote Originally Posted by FN-GM View Post
    When the time comes we wont be using a free product for the firewall.
    ????

    the PF is not for the EXTERNAL firewall, its to sit between the BYOD devices and the Cisco switch.

    Rob

  4. #19

    twin--turbo's Avatar
    Join Date
    Jun 2012
    Location
    Carlisle
    Posts
    2,334
    Thank Post
    1
    Thanked 381 Times in 340 Posts
    Rep Power
    150
    byod.pdf

    Rough!

  5. #20

    FN-GM's Avatar
    Join Date
    Jun 2007
    Location
    UK
    Posts
    16,227
    Thank Post
    893
    Thanked 1,776 Times in 1,532 Posts
    Blog Entries
    12
    Rep Power
    461
    I mis understood you. Can we move the BYOD stuff to the other post please as this thread is about the main firewall. thanks

  6. #21

    FN-GM's Avatar
    Join Date
    Jun 2007
    Location
    UK
    Posts
    16,227
    Thank Post
    893
    Thanked 1,776 Times in 1,532 Posts
    Blog Entries
    12
    Rep Power
    461
    Quote Originally Posted by FN-GM View Post
    Well i dont want it to route between the VLANS i want the L3 switch to do that.

    Would i set a static route on the Switch so it knows for that vlan to go to pfsense? The DG of my clients will be the VLAN interface IP.

    Something like

    ip route 172.20.2.0 255.255.255.0 <ip of pfsense>

    Basically i want it to act as a firewall and to get an internet connection to my test setup.

    Thanks
    Will this work please?

  7. #22

    twin--turbo's Avatar
    Join Date
    Jun 2012
    Location
    Carlisle
    Posts
    2,334
    Thank Post
    1
    Thanked 381 Times in 340 Posts
    Rep Power
    150
    that will route all trafic going to the 172.20.2.0 via the PF

  8. #23

    FN-GM's Avatar
    Join Date
    Jun 2007
    Location
    UK
    Posts
    16,227
    Thank Post
    893
    Thanked 1,776 Times in 1,532 Posts
    Blog Entries
    12
    Rep Power
    461
    Quote Originally Posted by twin--turbo View Post
    that will route all trafic going to the 172.20.2.0 via the PF
    oh good so that will be right then

  9. #24

    SYNACK's Avatar
    Join Date
    Oct 2007
    Posts
    11,240
    Thank Post
    882
    Thanked 2,742 Times in 2,316 Posts
    Blog Entries
    11
    Rep Power
    784
    pfsense is rubbish with PPTP traffic so if anyone uses that then avoid it.

    There are others like ClearOS Community Edition | Software
    Router/Bridge Linux Firewall
    and
    Untangle: Network Policy at Work
    are also good choices that can handle protocols a bit better and include stuff like WAN load sharing.

  10. #25

    FN-GM's Avatar
    Join Date
    Jun 2007
    Location
    UK
    Posts
    16,227
    Thank Post
    893
    Thanked 1,776 Times in 1,532 Posts
    Blog Entries
    12
    Rep Power
    461
    Its only a test really i think we are going for smoothwall in the end of it.

  11. #26

    SYNACK's Avatar
    Join Date
    Oct 2007
    Posts
    11,240
    Thank Post
    882
    Thanked 2,742 Times in 2,316 Posts
    Blog Entries
    11
    Rep Power
    784
    Quote Originally Posted by FN-GM View Post
    Its only a test really i think we are going for smoothwall in the end of it.
    Yea Smoothwall does do all that stuff, but only in the pay for versions.

  12. #27

    twin--turbo's Avatar
    Join Date
    Jun 2012
    Location
    Carlisle
    Posts
    2,334
    Thank Post
    1
    Thanked 381 Times in 340 Posts
    Rep Power
    150
    Well I am 70% of the way there.

    I haev PF up, captive working , just need to fix it's DNS as that's being funky... and then make sure the rest of it is LOCKED down.

    I wasted 2 hrs because explorer would not show the toolbar at the top and I could not manage PF via the WAN interface. Firefox on a client side allowed me to enable HTTPS to get in via firefox on the wan side.

    Rob

  13. #28

    FN-GM's Avatar
    Join Date
    Jun 2007
    Location
    UK
    Posts
    16,227
    Thank Post
    893
    Thanked 1,776 Times in 1,532 Posts
    Blog Entries
    12
    Rep Power
    461
    Quote Originally Posted by SYNACK View Post
    Yea Smoothwall does do all that stuff, but only in the pay for versions.
    Yer thats the one we will be gunning for.
    @twin--turbo i look forward to your setup guide

  14. #29
    cpjitservices's Avatar
    Join Date
    Jul 2010
    Location
    Hessle
    Posts
    2,534
    Thank Post
    523
    Thanked 293 Times in 269 Posts
    Rep Power
    83
    Im glad PFSense is serving you guys well! and hope you enjoy it as much as I have......

  15. #30

    twin--turbo's Avatar
    Join Date
    Jun 2012
    Location
    Carlisle
    Posts
    2,334
    Thank Post
    1
    Thanked 381 Times in 340 Posts
    Rep Power
    150
    Well:

    My test laptop can get an IP, it gets DNS.

    I fire up firefox and try to go to google.

    It goes to the captive portal and I log on ( will change this to an accept button )

    And it goes directly to the citrix logon.

    I try to go to google, it does nothing.
    I try to ssh to our web server, it does nothing.
    I try any website other than the VDI.... It does nothing..
    HAHAHAHAHAHAHAHAHAHAHAHAH

    Rob

  16. Thanks to twin--turbo from:

    cpjitservices (15th November 2012)

SHARE:
+ Post New Thread
Page 2 of 6 FirstFirst 123456 LastLast

Similar Threads

  1. Smoothwall Express Error
    By netadmin in forum *nix
    Replies: 8
    Last Post: 9th October 2007, 07:44 AM
  2. Replies: 3
    Last Post: 19th January 2007, 11:06 AM
  3. Anyone recommend Smoothwall Express?
    By OverWorked in forum *nix
    Replies: 15
    Last Post: 26th January 2006, 11:37 AM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •