Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Configuring a /29 subnet

    HA/CARP/VIPs
    2
    3
    1.6k
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • T
      Turfrider
      last edited by

      Hey,

      I think I have configured it incorrectly however it is working mostly. I'm looking for advice on how it should be configured correctly. If this is the wrong section let me know where I should post for better visibility.

      I have a PPPOE connection which gets a WAN_PPPOE IP of 212.X.X.15. I can't use this IP at all, but I do see it on pfsense.
      I have a /29 subnet assigned to me which gets WAN IP of 213.x.x.169.
      The .169 is the address my pfsense box appears to the public internet.

      I've then configured VIPs, .170/32 to .174/32

      I use NAT Outbound configuration to send a subnet out over 170.
      I use NAT Outbound configured for 2 pcs + PS4 on the network to pass all trafic to those, in essance making them 1:1. Maybe I should have used 1:1 for that option instead.
      I use NAT port forwarding for cetain games, match it to the VIP and the Lan IP.

      Result LAN + Wifi use 170.
      PC1 uses 171
      PC2 uses 172
      PS4 uses 173

      I feel like i've completed misunderstood the use of VIP's and should be only passing these IP's directly to ethernet ports on the pfsense box instead of doing it in routed mode I suppose.

      This does work quite well however I have issues with Paypal not working correctly and few other strange issues that I'm suppecting might be this configuration.

      I'll be moving house soon and looking at changing things for the better.

      Thanks!

      S 1 Reply Last reply Reply Quote 0
      • S
        SteveITS Galactic Empire @Turfrider
        last edited by

        @turfrider 1:1 NAT will direct all incoming traffic for those IPs, on all ports, to those devices. Normally used to put two servers on the Internet that use the same listening port, like two web servers.

        It sounds like you're trying to get each device on its own public IP? Normally that's not needed unless one has a server like a web server that needs its own IP.

        It should work though, post your outbound NAT rules. It should be easy enough to test if you go to a page like http://checkip.dyndns.org/ on each device.

        Pre-2.7.2/23.09: Only install packages for your version, or risk breaking it. Select your branch in System/Update/Update Settings.
        When upgrading, allow 10-15 minutes to restart, or more depending on packages and device speed.
        Upvote 👍 helpful posts!

        T 1 Reply Last reply Reply Quote 0
        • T
          Turfrider @SteveITS
          last edited by

          049f21fe-c7d0-4640-8834-d5f7af093f0a-image.png

          1 Reply Last reply Reply Quote 0
          • First post
            Last post
          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.