Home network help

Forums › LAN (ethernet/Wifi/routers/Bluetooth) › Home network help

shrub

775 posts

Ultimate Geek

ID Verified

#77169 11-Feb-2011 20:26

Hello all
I need some help deciding and setting up a firewall/QoS

So far I have setup structured cabling throughout the house also have a wireless router setup as an access point (DHCP dissabled)
modem is a Draytek Virgor 120 that is working as a PPPoA/PPPoE bridge and is fine

I am running pfsense 1.2.3 on an old p3 800
There is 5 computers 2 consoles and laptops connected most of the time.
The net seems to work as it should but i have lots of issues with games and some web sites eg youtube vids will not load.
Some games will connect BFP4Free and Trackmania work yet BF2 does not. I have tried to port forward but still will not work.
Also need to setup a traffic monitor so i can see and charge appropriately the internet usage as we keep busting the caps every month.

I really dont care to much about the firewall side of things just need QoS as still on ADSL

If anyone knows of a better solution or how to configure pfsense so i can use this setup it would be much appreciated.

Ragnor

8222 posts

Uber Geek

Trusted

#438489 12-Feb-2011 01:00

I am assuming you have it setup, where you pfsense box has 2 network cards one connected to the modem and the other to a switch, like:

Draytek > Pfsense > Switch > Wireless

I think Enabling upnp and NAT-PMP should help with many games, others you might need to alter the games config on each players machine so they use different ports (depends on the game).

pfsense has QoS / shaping iirc, so use that to lower the priority of p2p, large downloads etc and prioritise gaming... will probably involve quite a bit of trial and error.

pfsesne also seems to have various usage graphs. What you probably want to do is in the dhcp settings change it so the known machines always get the same ip address, this is usually called "static dhcp by mac address".

shrub

775 posts

Ultimate Geek

ID Verified

#438526 12-Feb-2011 10:03

Ragnor: I am assuming you have it setup, where you pfsense box has 2 network cards one connected to the modem and the other to a switch, like:

Draytek > Pfsense > Switch > Wireless

I think Enabling upnp and NAT-PMP should help with many games, others you might need to alter the games config on each players machine so they use different ports (depends on the game).

pfsense has QoS / shaping iirc, so use that to lower the priority of p2p, large downloads etc and prioritise gaming... will probably involve quite a bit of trial and error.

pfsesne also seems to have various usage graphs. What you probably want to do is in the dhcp settings change it so the known machines always get the same ip address, this is usually called "static dhcp by mac address".

Yea thats how i have it all setup i cant find NAT-PMP i assume its automatic. The traffic shaper i find hard to understand fully yet. I have to load the ports and local ip for everrything and it just ends up trying to do to much i think. I have set the DHCP lease time to 30years or something.

I have the traffic monitor working now using BandwidthD.
Now i just have to work out why pfsense was shut down overnight...

foremannz

34 posts

Geek

#438751 13-Feb-2011 06:59

I have done this for my setup as well

ADSL router -> firewall nic1 -> firewall nic2 -> switch -> access point with 8db aerial

pfsense runs static mapped IP addresses for all the flatmates, where I have moved flatmate 1's addresses to 192.168.x.2x and flatmate 2's addresses to 192.168.x.3x. In doing this, I also set the hostname to a name starting with the flatmates name for easy identification - this is then resolved by bandwidthd by the hostname for the individual IP graphs.

bandwidthd graphs themselves are a bit deceptive out of the box, as its set to something like 8 days a week, 35 days a month, etc, so easiest to do a screen cap of the figures at the end of your billing month or delete the log files outright, so that you can moniitor within your monthly cap. Theres still a few teething issues with the likes of the software not changing the logs at midnight, etc, so I just work on the monthly graph only, but this is still easy enough to pick up the heavy downloaders in a matter of minutes :)