Using Smoothwall Express With a Cisco Layer 3 Switch?

[SYNACK]

Its only a test really i think we are going for smoothwall in the end of it.

 

Yea Smoothwall does do all that stuff, but only in the pay for versions.

[twin--turbo]

Well I am 70% of the way there.

 

I haev PF up, captive working , just need to fix it's DNS as that's being funky... and then make sure the rest of it is LOCKED down.

 

I wasted 2 hrs because explorer would not show the toolbar at the top and I could not manage PF via the WAN interface. Firefox on a client side allowed me to enable HTTPS to get in via firefox on the wan side.

 

Rob

[FN-GM]

Yea Smoothwall does do all that stuff, but only in the pay for versions.

 

Yer thats the one we will be gunning for.

@twin--turbo i look forward to your setup guide

[cpjitservices]

Im glad PFSense is serving you guys well! and hope you enjoy it as much as I have......

[twin--turbo]

Well:

 

My test laptop can get an IP, it gets DNS.

 

I fire up firefox and try to go to google.

 

It goes to the captive portal and I log on ( will change this to an accept button )

 

And it goes directly to the citrix logon.

 

I try to go to google, it does nothing.

I try to ssh to our web server, it does nothing.

I try any website other than the VDI.... It does nothing..

HAHAHAHAHAHAHAHAHAHAHAHAH

 

Rob

[cpjitservices]

Well:

 

My test laptop can get an IP, it gets DNS.

 

I fire up firefox and try to go to google.

 

It goes to the captive portal and I log on ( will change this to an accept button )

 

And it goes directly to the citrix logon.

 

I try to go to google, it does nothing.

I try to ssh to our web server, it does nothing.

I try any website other than the VDI.... It does nothing..

HAHAHAHAHAHAHAHAHAHAHAHAH

 

Rob

 

Thats great TT, how wonderful is Pf... and @SYNACK... PF is no longer funky with PPTP, there is a new version that is fine! - If you install 2.2-BETA0 (i386) PPTP has been improved as have many other features.

 

The BETA is going to be released very soon.

Edited November 15, 2012 by cpjitservices

[SYNACK]

Ah, it was still on their known issues list last time I checked so I was weary, beta also makes me a bit weary, in the non-google-BS meaning.

[SYNACK]

Thats great TT, how wonderful is Pf... and @SYNACK... PF is no longer funky with PPTP, there is a new version that is fine! - If you install 2.2-BETA0 (i386) PPTP has been improved as have many other features.

 

The BETA is going to be released very soon.

@cpjitservices - How do I get a hold of an iso for that?

[cpjitservices]

just go to

 

pfSense Open Source Firewall Distribution - Home

 

download the latest beta, or download the normal i386 ISO and download the update zip file and do a firmware upgrade.

[SYNACK]

just go to

 

pfSense Open Source Firewall Distribution - Home

 

download the latest beta, or download the normal i386 ISO and download the update zip file and do a firmware upgrade.

 

Couldn't find anything äbove 2.0.1 Through the site hence the question, hidden link somewhere or am I being blind?

[cpjitservices]

I'll dig out the link for you today.

[cpjitservices]

Here's the link of the BETA we are currently testing....

 

http://snapshots.pfsense.org/FreeBSD_RELENG_8_3/i386/pfSense_HEAD/livecd_installer/pfSense-LiveCD-2.1-BETA0-i386-20121118-1928.iso.gz

 

It's a live CD - so you don't have to install it but there is an installer if you do want to install it.

[SYNACK]

Here's the link of the BETA we are currently testing....

 

http://snapshots.pfsense.org/FreeBSD_RELENG_8_3/i386/pfSense_HEAD/livecd_installer/pfSense-LiveCD-2.1-BETA0-i386-20121118-1928.iso.gz

 

It's a live CD - so you don't have to install it but there is an installer if you do want to install it.

 

Thanks, I'll see how nicely or otherwise it plays with Hyper-V.

[cpjitservices]

Thanks, I'll see how nicely or otherwise it plays with Hyper-V.

 

Never tried it in Hyper-V because I don't have a hyper-v environment, but it works in VMWare and Virtualbox.

[twin--turbo]

I found out pFs can be made to run on a Watchguard.

 

Fortunatly I have 3 redundant ones behind my desk Just waiting for a 4GB CF card to do the install

 

Rob

[cpjitservices]

I found out pFs can be made to run on a Watchguard.

 

Fortunatly I have 3 redundant ones behind my desk Just waiting for a 4GB CF card to do the install

 

Rob

 

Yes Indeed it can, your'e a so and so though @twin--turbo - I've been waiting ages to get hold of one of those to try out this theory!!

 

In the watchguards some of them have an IDE interfac so you could always use a standard HD if need be.

Edited November 19, 2012 by cpjitservices

[twin--turbo]

Yes Indeed it can, your'e a so and so though @twin--turbo - I've been waiting ages to get hold of one of those to try out this theory!!

 

In the watchguards some of them have an IDE interfac so you could always use a standard HD if need be.

 

Yep two X5500e-Peak and an SSL500 ( different ram and CPU ).

 

They don't have the standard HDD interface for the IDE but I can get an adapter if need be. could put DansG on it with a HDD...

 

And with the mial filtering I can built a UTM on dedicated HW rather than on a Virtual Machine...

 

Will keep you all posted in a new thread when the ball starts rolling.

 

Rob

[cpjitservices]

Yep two X5500e-Peak and an SSL500 ( different ram and CPU ).

 

They don't have the standard HDD interface for the IDE but I can get an adapter if need be. could put DansG on it with a HDD...

 

And with the mial filtering I can built a UTM on dedicated HW rather than on a Virtual Machine...

 

Will keep you all posted in a new thread when the ball starts rolling.

 

Rob

 

Please do... something I've been wanting to try for a while.

 

I'll look forward to the new thread. A HW UTM sounds good!

[SYNACK]

Never tried it in Hyper-V because I don't have a hyper-v environment, but it works in VMWare and Virtualbox.

@cpjitservices - Won't even detect interfaces properly with the legacy adapters under Hyper-V, useless to me as we use Hyper-V and I'm not making a whole new VM server just for this. Found a custom zeroshell one that actually boots and even uses the synthetic adapters Rick's Blog: Exciting adventures with ZeroShell and Hyper-V

 

The only one that actually seems to have made any effort to be remotely compatible with Hyper-V.

[Arthur]

Won't even detect interfaces properly with the legacy adapters under Hyper-V

Probably too late, but there are drivers available for Hyper-V's synthetic NIC and IDE/SCSI controllers in FreeBSD-based OSs.

 

http://freebsdonhyper-v.github.com/

https://github.com/FreeBSDonHyper-V/freebsd/wiki/Build-the-kernel-with-the-HyperV-drivers

[SYNACK]

Probably too late, but there are drivers available for Hyper-V's synthetic NIC and IDE/SCSI controllers in FreeBSD-based OSs.

 

Freebsdonhyper-v.github.com

https://github.com/FreeBSDonHyper-V/freebsd/wiki/Build-the-kernel-with-the-HyperV-drivers

 

Thanks, I'll give that a go if I get time, I have been stuffing about with this for a couple of days now though and may just stick with the only one that runs without recompiling the whole thing from the ground up.

[Ric_]

@FN_GM Would you still like to know how to add a route on your switch?

[FN-GM]

Please Ric

 

Is it this? - ip route 172.20.2.0 255.255.255.0

 

Thanks

[Ric_]

@FN-GM To help, we need to know the subnets of each VLAN (including the subnet that the smoothie is on). IP addresses might help too.

[FN-GM]

Have you seen the attached image on post 1?