I am new here and got some questions :

1- I have a local network with two groups of users : Restricted and non-Restricted, for Restricted users I use an alias with proper rules list and static dhcp mapping, my question is : is there a way to prevent those two groups from connecting to each other with some exceptions (I noticed they can connect with each other when the firewall was rebooting).

2- Can I prevent all users from connecting to internet if they don't have their IP from pfsense DHCP server ?

3- Can I use a virtual extra subnet for my lan ??

Thats it for now, thank you very much !

  • You need to provide more details about the topology of your network. The information provided now is ambiguous and confusing. – Appleoddity Jul 24 '17 at 6:24

answering 2: you can set all machine default gateways to the pfSense ip addy and use that as the next hop address, this will prevent any from accessing internet until pfsense is up and running

1 & 3: you can, if you set up a Vlan each for Restricted and for Non Restricted then they wont be able to communicate (unless set in an ACL or forwarded or something you have explicitly done)

| improve this answer | |
  • Thanks for trying to answer, about point 2 : you did not get me, what I meant a local user can change his network setting from dhcp to static IP, other than what I would give him, for example I would give a restricted IP, for example for his MAC address when dhcp request is made from his NIC, but the user would avoid the restriction by setting his IP manually to, and this actually will work, so how we stop this? – Fanar Web Jul 24 '17 at 11:09

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.