network perimeter redundancy with pfsense, chris buechler

dcbsdcon 2009
chris buechler
network perimeter redundancy with pfsense

This session will first provide an introduction and overview of pfSense and its common uses. It will then go on to cover means of providing redundancy for the critical portions of your network perimeter using pfSense, including redundancy for your Internet connections, firewalls and DNS. Live configuration examples will be shown for as many of these topics as the session's length permits. This session will cover pfSense 1.2.1, but will also offer an overview of some of the enhanced capabilities in this area that pfSense 2.0 will provide in the future.

Source: Jason Dixon

Category:

Science & Technology

Tags:

• dcbsdcon
• dcbsdcon09
• pfsense
• bsd

[dpuckett]

Great presentation. Glad these are posted for those of us who cant make it to the conferences. We use a virtual instance of pfSense running on ESXi for our guest wireless for the captive portal feature. We are building out a rack in a colo within the next couple of months and I hope to put a pfSense box on the edge. Keep up the good work.

[randgate]

Great intro to pfsense, past present and future stuff.

Can't wait for 2.0/relayd!

[dpuckett]

@Pepsifx357 wwp98072 is right. I just have a dedicated physical port on the host directly connected to the Internet and one of the other ports configured for for VLAN trunking for our Guest VLAN from the Access Point.

[Pepsifx357]

@wwp98072 Thanks, will do!

[wwp98072]

@Pepsifx357 On the physical server, make one of the physical ethernet ports the External/WAN interface and make another physical ethernet port the Internal/LAN/NAT interface. On VMWare, I added a second software switch to the system and add the LAN interface to the second switch and bound all the internal VMs to this switch and then setup NAT on pfSense for these hosts.

[Pepsifx357]

@dpuckett OMG...why didn't I think of using this software in a virtual environment. Sometimes I feel stupid for not thinking of these things. Here I've got some 333Mhz dinosaur consuming energy for nothing. I'm new in IT and still learning I guess. :) How do you manage the physical ethernet ports along with the other OSs in VMware? Do you just have a bunch of NICs?