pfSense » pfSense Plus

You remain in error.

Somehow it was able to work well for 6 years and I think it was used by many people who use TAP in a different way than you assume.

https://www.youtube.com/watch?v=zt3EYV9mlnQ (see 15:06)

So write how we should configure it now, especially since several devices died after the update and to this day we still have problems with restoring the configuration.

We want to add through "Client Specific Overrides" specific IP addresses for clients, manually set routing and add gateways.

Since you've already negated something that worked well several times, write what your idea is now.

I checked what you suggested but from the client side it is also no longer possible to make a bridge with the OpenVPN TAP client with its own LAN.

That is to say, we have a TAP between pfsense that doesn't do anything because it is impossible to see the MAC on the LAN from the client side.

Previously you could link any number of networks, TAP servers and see all networks on each side.

How to assign a permanent address from the DHCP pool to a specific client in this solution ?

Can you restore the ability to do a bridge from the client side with its lan ?

A tap bridge is only useful for linking L2 which would see MAC addresses, so you reserve hosts in DHCP by MAC address as you do any other device on the LAN. OpenVPN clients themselves on a tap bridge also do not have any interface address, they link directly to the bridge at L2 so there is no routing or intermediate network. Otherwise there is no point in bridging and you can just use routed networking without bridging. There is no separate network for a bridge client/server. There is no routing across a bridge. It's all L2 so it's linked at L2 and systems use ARP to find their way to various hosts as they need to since they're all in one large shared network with the same IP addressing/subnet.

If none of that applies it sounds like maybe you don't even need a bridge, but a traditional routed VPN.

Please take the discussion to the forum.

Jim,

we don't need a forum, we need a contact to people who have real influence on the pfSense code - you don't have it, you are busy quoting the official manual.

Here's the configuration we're looking for:

https://icr.advantech.com/support/faq/detail/how-to-create-openvpn-tap-interface-bridge-mode

questions: can you restore unrestricted configuration of bridges for users ?

we use pfsense so that we do not have to write scripts, and now we are back to the situation that, to have what we want we have to write a script.

reading your statements, you are unable to respond otherwise, in our opinion you contribute to blocking the development of good software.

is there any contact with people higher up than you ?