I did a bit of research and I'm presuming the command to do this is 'interface bonding add name=P01 mode=802.3ad transmit-hash-policy=layer2-and-3 slaves=ether1,ether2'. Get 3 S+RJ10 SFP's, then create a LAGG group for two of those connections and use the third to the cable modem. To do this, I'm thinking of putting a CRS305-1G-4S+IN between the cable modem and my pfsense box. What I want to do is get the full speed of that 2.5G port (well, really 1.5G since that's what I'm provisioned from the provider) over to my pfsense box. I then have a pfsense box with a couple of gigabit nic's in it. From what I've seen, the 10G ethernet SFP's support this speed.

I have a cable modem with a 2.5G port on it. Lastly, i will remove the switch before the mikrotik router and wire the pfsense WAN straight to the ROUTER LAN and force every user to pass through the pfsense.I have a bit of a problem and before I purchase anything, I was hoping somebody can let me know if this will work or not. My next step is to install some packages especially squid and see how it works, play around with some configurations and i promise to keep you posted. When i disable NAT on the pfsense, the PC lost access to the internet, which is understandle know that the PC and LAN of the Mikrotik are in different subnets. The pfsense can resolve domain names and download packages. The pfsense and Mikrotik are doing double NATing. The PC has default gateway of 192.168.21.1.

My production LAN traffic FOR NOW goes straight to the mikrotik and uses the default gateway of 192.168.20.2 while i'm using the PC (only computer connected through the pfsense) to configure and test the connectivity. Internet–-mikrotik-switch-WAN pfsense LAN-switch-PC However, in order not to cut users off the internet, i connected the pfsense WAN to the switch where the mikrotik is connected too. I have successfully configured the pfsense behind the edge mikrotik router.

Mikrotik pfsense