pfSense Konfigurace (Auto-generated)
Vygenerováno: 2026-07-20 22:27
Zdroj: Live SSH z 192.168.20.1
🖥️ Systém
| Parametr |
Hodnota |
| pfSense |
2.8.1-RELEASE |
| Hostname |
pfSense.marada.lan |
| CPU |
QEMU Virtual CPU version 2.5+ (2 cores) |
| RAM |
2.9 GB |
| Uptime |
10:27PM up 14 days, 13:40, 1 user, load averages: 0.23, 0.11, 0.08 |
| WAN IP |
192.168.4.184 |
🌐 Interfaces
| Interface |
Tag |
IP Adresa |
Subnet |
Device |
Status |
| WAN |
wan |
dhcp |
/ |
vtnet0 |
✅ |
| LAN |
lan |
192.168.20.1 |
/24 |
vtnet1 |
✅ |
| GUEST |
opt1 |
192.168.30.1 |
/24 |
vtnet2 |
✅ |
| IOT |
opt2 |
192.168.40.1 |
/24 |
vtnet3 |
✅ |
| MEDIA |
opt3 |
192.168.50.1 |
/24 |
vtnet4 |
✅ |
| SECURITY |
opt4 |
192.168.60.1 |
/24 |
vtnet5 |
✅ |
| STAGING |
opt5 |
192.168.1.1 |
/24 |
vtnet6 |
✅ |
📊 Provoz per Interface
| Interface |
Device |
RX (In) |
TX (Out) |
Pkts In |
Pkts Out |
| WAN |
vtnet0 |
176.0 GB |
107.6 GB |
178,497,724 |
118,185,170 |
| LAN |
vtnet1 |
219.5 GB |
4.1 TB |
1,904,948,602 |
3,662,020,972 |
| GUEST |
vtnet2 |
399.0 MB |
762.3 MB |
311,594 |
2,048,415 |
| IOT |
vtnet3 |
663.5 MB |
609.1 MB |
5,179,184 |
3,129,285 |
| MEDIA |
vtnet4 |
7.3 GB |
112.8 GB |
35,278,960 |
101,184,657 |
| SECURITY |
vtnet5 |
4.1 TB |
111.7 GB |
3,565,329,304 |
1,795,916,438 |
📋 DHCP Server
Rozsahy
| Interface |
Od |
Do |
Status |
Lease (s) |
| LAN |
192.168.20.100 |
192.168.20.200 |
✅ |
7200 |
| GUEST |
192.168.30.100 |
192.168.30.200 |
✅ |
|
| IOT |
192.168.40.150 |
192.168.40.250 |
✅ |
|
| MEDIA |
192.168.50.100 |
192.168.50.200 |
✅ |
|
| SECURITY |
192.168.60.100 |
192.168.60.200 |
✅ |
|
Statické Rezervace
| Interface |
IP Adresa |
Hostname |
MAC Adresa |
Popis |
| LAN |
192.168.20.2 |
pmx1 |
68:1d:ef:4b:04:70 |
Proxmox Node 1 |
| LAN |
192.168.20.3 |
pmx2 |
68:1d:ef:55:9b:46 |
Proxmox Node 2 |
| LAN |
192.168.20.4 |
truenas |
b6:01:a1:11:87:c9 |
|
| LAN |
192.168.20.6 |
unifi |
bc:24:11:d6:23:b4 |
|
| LAN |
192.168.20.7 |
homeassistant |
02:e0:81:94:0c:51 |
|
| LAN |
192.168.20.8 |
pbs |
bc:24:11:79:91:e0 |
Proxmox Backup Server |
| LAN |
192.168.20.9 |
sw-rack-aruba |
34:c5:15:d0:f9:20 |
HPE 1830 24G (Cold Standby) |
| LAN |
192.168.20.10 |
usw-48-poe |
6c:63:f8:ac:8b:a3 |
|
| LAN |
192.168.20.11 |
ap1-chodba |
28:70:4e:5d:49:5d |
AP NP2 chodba |
| LAN |
192.168.20.12 |
ap2-satna |
28:70:4e:5d:45:41 |
AP NP2 satna |
| LAN |
192.168.20.13 |
ap3-bazen |
28:70:4e:5d:45:15 |
AP NP1 bazen |
| LAN |
192.168.20.14 |
ap4-spiz |
28:70:4e:4b:f6:5d |
AP NP1 spiz |
| LAN |
192.168.20.15 |
ap5-obyvak |
6c:63:f8:1a:2c:79 |
AP5 obývák |
| LAN |
192.168.20.16 |
ap6-herna |
6c:63:f8:19:8d:79 |
|
| LAN |
192.168.20.17 |
ap7-satna |
0c:ea:14:e2:a9:47 |
AP7 np2 šatna |
| LAN |
192.168.20.18 |
ap8-carport |
1c:0b:8b:0e:aa:67 |
|
| LAN |
192.168.20.19 |
usw-lite-8-poe |
6c:63:f8:75:c4:7a |
|
| LAN |
192.168.20.20 |
debian-services |
bc:24:11:65:54:f7 |
Docker host (Nginx, Grafana, Loki) |
| LAN |
192.168.20.21 |
scrypted |
bc:24:11:7e:3b:96 |
|
| LAN |
192.168.20.22 |
stash |
bc:24:11:19:ee:6d |
|
| LAN |
192.168.20.40 |
iphone-tomas |
68:ef:dc:b9:a4:c0 |
iPhone |
| LAN |
192.168.20.41 |
mac-tomas |
aa:74:b0:41:3d:b6 |
MacBook Air |
| LAN |
192.168.20.42 |
chromebook-janca |
d0:3c:1f:36:4b:c9 |
Lenovo ThinkPad Chromebook |
| LAN |
192.168.20.43 |
mac-tomas-eth |
18:65:71:ed:3f:c8 |
MacBook Air - Philips 346B Ethernet |
| LAN |
192.168.20.44 |
iphone-janca |
5c:ad:ba:bf:eb:cf |
iPhone Janca |
| LAN |
192.168.20.45 |
iphone-betka |
2c:df:68:5f:91:4d |
iPhone Betka |
| LAN |
192.168.20.90 |
immich |
bc:24:11:56:b5:1d |
|
| IOT |
192.168.40.2 |
zigbee |
68:25:dd:2e:fb:c7 |
SLZB-MR3 |
| IOT |
192.168.40.3 |
win11 |
bc:24:11:0f:8f:38 |
Windows 11 Pro |
| IOT |
192.168.40.5 |
tahoma |
28:f5:2b:b3:63:fd |
Somfy TaHoma Switch (Overkiz) |
| IOT |
192.168.40.8 |
print-lan |
dc:c2:c9:fc:3a:19 |
|
| IOT |
192.168.40.10 |
velux |
64:61:84:01:3d:75 |
Velux KLF200 |
| IOT |
192.168.40.20 |
debian-services-iot |
bc:24:11:74:48:bf |
debian-services IoT interface (CUPS print server) |
| IOT |
192.168.40.21 |
dali2net-dilna |
00:03:f4:0c:9a:d6 |
DALI rozvaděč |
| IOT |
192.168.40.22 |
sw-dilna |
1c:61:b4:20:79:ad |
TP-Link TL-SG108E v6.0 |
| IOT |
192.168.40.23 |
modbus-rele-dilna |
04:ee:e8:1f:5b:c6 |
|
| IOT |
192.168.40.24 |
einstein |
c0:61:9a:b8:4f:9a |
Victron Cerbo GX (FTV) |
| IOT |
192.168.40.25 |
fronius |
00:03:ac:62:a9:4f |
Fronius Solar Inverter (FTV) |
| IOT |
192.168.40.31 |
ecogeo |
00:05:f4:05:3b:43 |
EcoGeo 25568820035 |
| IOT |
192.168.40.32 |
modbus-rele-topeni |
04:ee:e8:14:34:2a |
|
| IOT |
192.168.40.33 |
rekuperace |
70:b8:f6:45:e7:2b |
Atrea |
| IOT |
192.168.40.34 |
modbus-gateway-topeni |
04:ee:e8:1c:cc:aa |
|
| IOT |
192.168.40.41 |
dali2net-vzt |
00:03:f4:0c:9b:88 |
DALI VZT |
| IOT |
192.168.40.42 |
modbus-gateway-vzt |
28:78:7b:b1:d0:4b |
MODBUS/ETH VZT |
| IOT |
192.168.40.43 |
modbus-rele-vzt |
04:ee:e8:10:33:f6 |
zavlažování a světla |
| IOT |
192.168.40.44 |
aseko |
9c:a5:25:ef:72:36 |
Aseko ASIN Aqua Oxy (Oxypure) — USR-K5 web modul, bazén |
| IOT |
192.168.40.51 |
fp2-kuchyn |
54:ef:44:50:93:e0 |
Aqara FP2 kuchyn |
| IOT |
192.168.40.52 |
fp2-relax |
54:ef:44:78:8b:f8 |
Aqara FP2 relax |
| IOT |
192.168.40.53 |
fp2-obyvak |
54:ef:44:7a:02:55 |
Aqara FP2 obyvak |
| IOT |
192.168.40.60 |
wallbox |
00:3b:4a:33:05:38 |
Schneider |
| IOT |
192.168.40.61 |
modbus-rele-sklad |
04:ee:e8:12:36:84 |
|
| IOT |
192.168.40.62 |
modbus-rele-sklad-2 |
04:ee:e8:16:32:b8 |
|
| MEDIA |
192.168.50.10 |
beosound-balance |
00:09:a7:98:4d:8d |
|
| MEDIA |
192.168.50.11 |
beosound-stage |
50:1e:2d:62:fb:88 |
|
| SECURITY |
192.168.60.10 |
intercom |
a4:d5:c2:22:8c:46 |
|
| SECURITY |
192.168.60.11 |
cam-1 |
24:0f:9b:b7:8a:3d |
HikVision Bullet |
| SECURITY |
192.168.60.12 |
cam-2 |
5c:34:5b:58:ed:73 |
HikVision Bullet |
| SECURITY |
192.168.60.13 |
cam-3 |
08:54:11:9f:0f:79 |
HikVision Bullet |
| SECURITY |
192.168.60.14 |
cam-4 |
5c:34:5b:58:ee:c9 |
HikVision Bullet |
| SECURITY |
192.168.60.15 |
cam-5 |
08:54:11:9f:0f:7a |
HikVision Bullet |
| SECURITY |
192.168.60.16 |
cam-6 |
5c:34:5b:58:f0:3c |
HikVision Bullet |
🔍 ARP Tabulka
| IP Adresa |
MAC Adresa |
Interface |
Typ |
192.168.1.1 |
bc:24:11:8a:85:db |
STAGING |
📌 Permanent |
192.168.4.1 |
0c:ea:14:ab:04:7c |
WAN |
Dynamic |
192.168.4.184 |
0c:ea:14:aa:04:7c |
WAN |
📌 Permanent |
192.168.20.1 |
bc:24:11:4d:7c:e8 |
LAN |
📌 Permanent |
192.168.20.2 |
68:1d:ef:4b:04:70 |
LAN |
Dynamic |
192.168.20.5 |
bc:24:11:78:4e:7d |
LAN |
Dynamic |
192.168.20.7 |
02:e0:81:94:0c:51 |
LAN |
Dynamic |
192.168.20.8 |
bc:24:11:79:91:e0 |
LAN |
Dynamic |
192.168.20.10 |
6c:63:f8:ac:8b:a3 |
LAN |
Dynamic |
192.168.20.17 |
0c:ea:14:e2:a9:47 |
LAN |
Dynamic |
192.168.20.18 |
1c:0b:8b:0e:aa:67 |
LAN |
Dynamic |
192.168.20.19 |
6c:63:f8:75:c4:7a |
LAN |
Dynamic |
192.168.20.20 |
bc:24:11:65:54:f7 |
LAN |
Dynamic |
192.168.20.21 |
bc:24:11:7e:3b:96 |
LAN |
Dynamic |
192.168.20.40 |
68:ef:dc:b9:a4:c0 |
LAN |
Dynamic |
192.168.20.41 |
aa:74:b0:41:3d:b6 |
LAN |
Dynamic |
192.168.20.44 |
5c:ad:ba:bf:eb:cf |
LAN |
Dynamic |
192.168.20.45 |
2c:df:68:5f:91:4d |
LAN |
Dynamic |
192.168.20.90 |
bc:24:11:56:b5:1d |
LAN |
Dynamic |
192.168.20.100 |
00:16:3e:a9:d5:63 |
LAN |
Dynamic |
192.168.20.106 |
ce:98:bb:10:3c:8e |
LAN |
Dynamic |
192.168.30.1 |
bc:24:11:b6:62:5e |
GUEST |
📌 Permanent |
192.168.30.103 |
02:a0:61:f2:66:d5 |
GUEST |
Dynamic |
192.168.30.111 |
fc:01:2c:17:b5:54 |
GUEST |
Dynamic |
192.168.40.1 |
bc:24:11:0a:be:0d |
IOT |
📌 Permanent |
192.168.40.5 |
28:f5:2b:b3:63:fd |
IOT |
Dynamic |
192.168.40.8 |
dc:c2:c9:fc:3a:19 |
IOT |
Dynamic |
192.168.40.24 |
c0:61:9a:b8:4f:9a |
IOT |
Dynamic |
192.168.40.31 |
00:05:f4:05:3b:43 |
IOT |
Dynamic |
192.168.40.33 |
70:b8:f6:45:e7:2b |
IOT |
Dynamic |
192.168.40.51 |
54:ef:44:50:93:e0 |
IOT |
Dynamic |
192.168.40.52 |
54:ef:44:78:8b:f8 |
IOT |
Dynamic |
192.168.40.53 |
54:ef:44:7a:02:55 |
IOT |
Dynamic |
192.168.40.62 |
04:ee:e8:16:32:b8 |
IOT |
Dynamic |
192.168.40.151 |
b0:e9:fe:cc:c8:b9 |
IOT |
Dynamic |
192.168.40.160 |
38:b4:d3:a8:65:7c |
IOT |
Dynamic |
192.168.40.165 |
9c:13:9e:10:25:dc |
IOT |
Dynamic |
192.168.40.166 |
00:11:b8:09:29:b8 |
IOT |
Dynamic |
192.168.40.168 |
68:a4:0e:bd:37:9a |
IOT |
Dynamic |
192.168.40.171 |
94:27:70:54:ad:e7 |
IOT |
Dynamic |
192.168.40.172 |
94:27:70:2e:05:11 |
IOT |
Dynamic |
192.168.50.1 |
bc:24:11:cb:ae:d5 |
MEDIA |
📌 Permanent |
192.168.50.10 |
00:09:a7:98:4d:8d |
MEDIA |
Dynamic |
192.168.50.11 |
50:1e:2d:62:fb:88 |
MEDIA |
Dynamic |
192.168.50.100 |
14:c1:4e:a2:b3:a6 |
MEDIA |
Dynamic |
192.168.50.101 |
dc:e5:5b:7c:33:85 |
MEDIA |
Dynamic |
192.168.50.102 |
dc:e5:5b:8c:b1:05 |
MEDIA |
Dynamic |
192.168.50.103 |
14:c1:4e:30:3f:cd |
MEDIA |
Dynamic |
192.168.50.105 |
20:df:b9:07:b3:65 |
MEDIA |
Dynamic |
192.168.50.106 |
c8:48:05:f6:09:aa |
MEDIA |
Dynamic |
192.168.50.107 |
14:c1:4e:6a:ee:a3 |
MEDIA |
Dynamic |
192.168.50.108 |
ac:67:84:30:bb:83 |
MEDIA |
Dynamic |
192.168.50.109 |
b4:b2:91:01:82:70 |
MEDIA |
Dynamic |
192.168.50.110 |
14:c1:4e:6c:08:71 |
MEDIA |
Dynamic |
192.168.50.111 |
40:ed:cf:85:f2:cc |
MEDIA |
Dynamic |
192.168.50.114 |
d4:f5:47:35:0a:8d |
MEDIA |
Dynamic |
192.168.60.1 |
bc:24:11:6a:d3:57 |
SECURITY |
📌 Permanent |
192.168.60.10 |
a4:d5:c2:22:8c:46 |
SECURITY |
Dynamic |
192.168.60.11 |
24:0f:9b:b7:8a:3d |
SECURITY |
Dynamic |
192.168.60.12 |
5c:34:5b:58:ed:73 |
SECURITY |
Dynamic |
192.168.60.13 |
08:54:11:9f:0f:79 |
SECURITY |
Dynamic |
192.168.60.14 |
5c:34:5b:58:ee:c9 |
SECURITY |
Dynamic |
192.168.60.15 |
08:54:11:9f:0f:7a |
SECURITY |
Dynamic |
192.168.60.16 |
5c:34:5b:58:f0:3c |
SECURITY |
Dynamic |
🌍 DNS Resolver
- Režim: forwarding
- DNS over TLS (upstream): yes
- DNSSEC: yes
- Upstream:
94.140.14.14, 94.140.15.15, 86.54.11.13
DNS Overrides
| Hostname |
IP |
Popis |
air.marada.name |
192.168.40.33 |
Atrea |
gateway-2095-2775-7873.local |
192.168.40.5 |
|
heat.marada.name |
192.168.40.31 |
EcoGeo |
home.marada.name |
192.168.20.20 |
Homepage |
nas.marada.name |
192.168.20.4 |
TrueNas |
photo.marada.name |
192.168.20.20 |
Immich via nginx |
pmx2.marada.name |
192.168.20.20 |
Proxmox node 2 via nginx |
router.marada.name |
192.168.20.1 |
pfSense |
Scrypted.marada.name |
192.168.20.20 |
Scrypted via nginx |
switch1.marada.name |
192.168.20.5 |
Aruba primary switch |
switch2.marada.name |
192.168.20.9 |
Aruba secondary switch |
zigbee.marada.name |
192.168.40.2 |
Zigbee coordinator |
🗺️ Routing
| Destination |
Gateway |
Flags |
Interface |
0.0.0.0 |
192.168.4.1 |
UGS |
vtnet0 |
100.76.211.31 |
link#12 |
UHS |
tailscale0 |
100.100.100.100 |
link#12 |
UHS |
tailscale0 |
100.126.254.40 |
link#9 |
UH |
lo0 |
127.0.0.1 |
link#9 |
UH |
lo0 |
192.168.1.0/24 |
link#7 |
U |
vtnet6 |
192.168.1.1 |
link#9 |
UHS |
lo0 |
192.168.4.0/24 |
link#1 |
U |
vtnet0 |
192.168.4.184 |
link#9 |
UHS |
lo0 |
192.168.20.0/24 |
link#2 |
U |
vtnet1 |
192.168.20.1 |
link#9 |
UHS |
lo0 |
192.168.30.0/24 |
link#3 |
U |
vtnet2 |
192.168.30.1 |
link#9 |
UHS |
lo0 |
192.168.40.0/24 |
link#4 |
U |
vtnet3 |
192.168.40.1 |
link#9 |
UHS |
lo0 |
192.168.50.0/24 |
link#5 |
U |
vtnet4 |
192.168.50.1 |
link#9 |
UHS |
lo0 |
192.168.60.0/24 |
link#6 |
U |
vtnet5 |
192.168.60.1 |
link#9 |
UHS |
lo0 |
🏷️ Firewall Aliases
| Název |
Typ |
Adresy |
Popis |
| Private_Networks |
network |
192.168.20.0/24 192.168.30.0/24 192.168.40.0/24 192.168.50.0... |
All internal home networks |
🔥 Firewall Rules
| Action |
Interface |
Proto |
Source |
Dest |
Description |
Status |
| ✅ pass |
LAN |
inet |
lan |
opt5 |
TEMP Allow LAN to Staging |
Active |
| ✅ pass |
LAN |
inet |
192.168.20.7 |
192.168.40.0/24 |
Allow HA to All IoT Devices |
Active |
| ✅ pass |
LAN |
inet |
lan |
any |
Default allow LAN to any rule |
Active |
| ✅ pass |
LAN |
inet6 |
lan |
any |
Default allow LAN IPv6 to any rule |
Active |
| ✅ pass |
TAILSCALE |
inet |
any |
any |
Allow Tailscale VPN Full Access |
Active |
| ✅ pass |
GUEST |
tcp/udp |
opt1 |
(self):53 |
Allow GUEST DNS to pfSense |
Active |
| 🚫 block |
GUEST |
inet |
opt1 |
Private_Networks |
Block Guest to Internal Networks |
Active |
| ✅ pass |
GUEST |
inet |
opt1 |
any |
Allow Guest to Internet |
Active |
| ✅ pass |
IOT |
udp |
opt2 |
224.0.0.251:5353 |
Allow mDNS |
Active |
| ✅ pass |
IOT |
tcp/udp |
opt2 |
(self):53 |
Allow IOT DNS to pfSense |
Active |
| 🚫 block |
IOT |
inet |
opt2 |
Private_Networks |
Block IoT to Internal Networks |
Active |
| ✅ pass |
IOT |
inet |
opt2 |
any |
Allow IOT to Internet |
Active |
| ✅ pass |
IOT |
udp |
opt2 |
ff02::fb:5353 |
Allow mDNS IPv6 (Matter) |
Active |
| ✅ pass |
IOT |
inet6 |
opt2 |
any |
Allow IOT IPv6 link-local (Matter) |
Active |
| ✅ pass |
MEDIA |
tcp/udp |
opt3 |
(self):53 |
Allow MEDIA DNS to pfSense |
Active |
| 🚫 block |
MEDIA |
inet |
opt3ip |
Private_Networks |
Block MEDIA to Internal Networks |
Active |
| ✅ pass |
MEDIA |
inet |
opt3 |
any |
Allow MEDIA to Internet |
Active |
| ✅ pass |
SECURITY |
udp |
opt4 |
(self):123 |
Allow Kamery NTP |
Active |
| ✅ pass |
SECURITY |
tcp/udp |
opt4 |
(self):53 |
Allow Kamery DNS |
Active |
| ✅ pass |
SECURITY |
tcp/udp |
opt4 |
192.168.20.21 |
Allow Kamery to Scrypted |
Active |
| 🚫 block |
SECURITY |
inet |
opt4 |
Private_Networks |
Block Kamery to LAN |
Active |
🔄 NAT Rules
no nat proto carp all
nat on vtnet0 inet from <tonatsubnets> to any port = isakmp -> 192.168.4.184 static-port
nat on vtnet0 inet6 from <tonatsubnets> to any port = isakmp -> (vtnet0) round-robin static-port
nat on vtnet0 inet from <tonatsubnets> to any -> 192.168.4.184 port 1024:65535
nat on vtnet0 inet6 from <tonatsubnets> to any -> (vtnet0) port 1024:65535 round-robin
no rdr proto carp all
📈 Firewall State Table
- Status: Enabled for 14 days 13:39:42 Debug: Urgent
- Aktivní stavy: current
⏰ NTP Status
remote refid st t when poll reach delay offset jitter
==============================================================================
tik.cesnet.cz .INIT. 16 u - 512 0 0.000 +0.000 0.000
🔐 Certifikáty
| Název |
Typ |
| GUI default (6a5e6eaebea69) |
server |
📦 Instalované Balíčky
- Tailscale
0.1.8 — Tailscale is a mesh VPN alternative, based on WireGuard, that connects your computers, databases, and services together securely without any proxies.
- Avahi
2.2_7 — Avahi is a system which facilitates host and service discovery in local networks via mDNS (Multicast DNS) and DNS-SD (DNS Service Discovery).
- RESTAPI
%%PKGVERSION%% — The missing REST API package for pfSense
⚠️ Detekované Anomálie
Zařízení v ARP tabulce bez DHCP statické rezervace:
- Neznámé zařízení:
192.168.20.106 (MAC: ce:98:bb:10:3c:8e, iface: vtnet1)
- Neznámé zařízení:
192.168.20.100 (MAC: 00:16:3e:a9:d5:63, iface: vtnet1)
- Neznámé zařízení:
192.168.20.5 (MAC: bc:24:11:78:4e:7d, iface: vtnet1)
- Neznámé zařízení:
192.168.40.160 (MAC: 38:b4:d3:a8:65:7c, iface: vtnet3)
- Neznámé zařízení:
192.168.40.165 (MAC: 9c:13:9e:10:25:dc, iface: vtnet3)
- Neznámé zařízení:
192.168.40.166 (MAC: 00:11:b8:09:29:b8, iface: vtnet3)
- Neznámé zařízení:
192.168.40.168 (MAC: 68:a4:0e:bd:37:9a, iface: vtnet3)
- Neznámé zařízení:
192.168.40.171 (MAC: 94:27:70:54:ad:e7, iface: vtnet3)
- Neznámé zařízení:
192.168.40.172 (MAC: 94:27:70:2e:05:11, iface: vtnet3)
- Neznámé zařízení:
192.168.40.151 (MAC: b0:e9:fe:cc:c8:b9, iface: vtnet3)
Dokumentace automaticky generována skriptem doc_gen_pfsense.py (SSH live data)