Netgate SG-1000 microFirewall

Show Posts

This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.


Topics - solarizde

Pages: [1]
1
General Questions / webUI / nginx no response but SSH fine [SOLVED]
« on: February 07, 2018, 02:17:36 am »
Hi,

on a small branch pfsense I encountered a strange problem I never had before.
If I try to connect to web UI the session always times out, no changes to the FW were made it just started to show this behavior randomly.

SSH Login on the other hand is fine, if I restart webconf and php-fpm by console still the same problem. Routing FW and setup VPN seems to work without any Problem but no UI anymore.

If I take a look at the nginx log files the strang thing happens, Nginx log is empty only showing some unreadable ASCII Chars.



A nginx -t is fine also nginx process is running. If I manually kill it and start  nginx -c /var/etc/nginx-webConfigurator.conf  no error is reported too.


Any Tipp or suggestion for me would be apreciated, currently is a bad time to reset and reconfigure the whole thing :)


Thanks alot.




2
NAT / Multi WAN IPs to Multi VLAN NAT
« on: July 28, 2017, 09:46:57 am »
Hey,

I currently face a little Problem with some NAT. I have a WAN Connection with several public IPs needed to be used by several internal VLANs.

Lets say, my WAN IPs would be 1.0.0.2 - 1.0.0.6 with 1.0.0.1 as my WAN GW. On my LAN I have 5 matching VLAN IDs 2 to 6.

From VLAN 1: 192.168.2.0/24 to VLAN 5: 192.168.6.0/24

What I want to achieve is a normal NAT Operation for those isolated VLANs with a WAN Mapping like:

1.0.0.2 <-NAT-> 192.168.2.0/24
1.0.0.3 <-NAT-> 192.168.3.0/24
1.0.0.4 <-NAT-> 192.168.4.0/24
1.0.0.5 <-NAT-> 192.168.5.0/24
1.0.0.6 <-NAT-> 192.168.6.0/24


Currently I tried to add my public WAN IPs as a "IP Alias" to my WAN Interface and created VLANs with matching DHCP Settings. So far so good, but how do I get the mapping done right? 1:1 Mapping as far as I understood only help me to map to a single host not to a whole /24

Does anybody have some experience with that?

Thanks in Advance




3
General Questions / Process 'rate' 100% CPU utilization
« on: March 27, 2017, 07:35:56 am »
Hey,

using pfSense since many years, abolutely happy with it. Last week I installed a new pfSense in my Office and found a odd thing today, one CPU was running at max. since now 16H+ I found that the "rate" process is causing this.

First I thought it might be the WebFrontend stats causing it but even when not logged in and restartet the web UI by console it still consume the CPU.

I ran a TOP and some other Informations here:
http://kopy.io/tUwtc#Bbj97OIMQqWnr6

Any tipp for me where to look at? There is no Rate limiter or Queues configured on this box, just pretty simple 1 WAN + 1 Failover WAN NAT to one LAN + 1 VLAN for Guests. No enhanced magic done :)

Thanks in Advance for any Ideas.

Pages: [1]