Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Multiple static IP on different gateway

    Scheduled Pinned Locked Moved General pfSense Questions
    29 Posts 7 Posters 2.2k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • V
      viragomann @firewalled_lotusdew
      last edited by

      @firewalled_lotusdew
      Did you simptry out yet is the other two gateways are really needed?

      1 Reply Last reply Reply Quote 0
      • bingo600B
        bingo600 @firewalled_lotusdew
        last edited by

        @firewalled_lotusdew
        Please supply the subnet mask(s) you got for the ip's

        If you find my answer useful - Please give the post a šŸ‘ - "thumbs up"

        pfSense+ 23.05.1 (ZFS)

        QOTOM-Q355G4 Quad Lan.
        CPUĀ  : Core i5 5250U, Ram : 8GB Kingston DDR3LV 1600
        LANĀ  : 4 x Intel 211, DiskĀ  : 240G SAMSUNG MZ7L3240HCHQ SSD

        F 1 Reply Last reply Reply Quote 0
        • F
          firewalled_lotusdew @bingo600
          last edited by

          @bingo600 The mask is 255.255.252.0

          You mean expect 123.176.60.77 to be routed via 123.176.59.1 ?

          bingo600B V 2 Replies Last reply Reply Quote 1
          • bingo600B
            bingo600 @firewalled_lotusdew
            last edited by bingo600

            @firewalled_lotusdew

            The 255.255.252.0 mask "covers 1024 ip addesses" aka. 4 Class-C networks.

            Could you please supply the first REAL 3 octets of your ip addresses ? - A.B.C.?? , the ?? part is irellevant , if you dont want to supply.

            Well actually it's just the C part that's interesting , if you got a 255.255.252.0 mask (a /22).

            Chances are that you can use a 255.255.252.0 mask on your WAN , and "cover all" ip's asigned with the same def-gw.

            /Bingo

            If you find my answer useful - Please give the post a šŸ‘ - "thumbs up"

            pfSense+ 23.05.1 (ZFS)

            QOTOM-Q355G4 Quad Lan.
            CPUĀ  : Core i5 5250U, Ram : 8GB Kingston DDR3LV 1600
            LANĀ  : 4 x Intel 211, DiskĀ  : 240G SAMSUNG MZ7L3240HCHQ SSD

            P bingo600B 2 Replies Last reply Reply Quote 0
            • P
              Patch @bingo600
              last edited by Patch

              From a network configuration advice surely only the lest significant digit are relevant. The ones which a consistent between all of his IP address do not need to be publicly disclosed.

              That and the network mask which may cover all public IP given.

              Although I guess 123.176. is rubbish and perhaps the remainder is more accurate.

              DerelictD 1 Reply Last reply Reply Quote 0
              • bingo600B
                bingo600 @bingo600
                last edited by bingo600

                @Patch
                You mean like i wrote here 😊

                @bingo600 said in Multiple static IP on different gateway:

                Well actually it's just the C part that's interesting , if you got a 255.255.252.0 mask (a

                If you find my answer useful - Please give the post a šŸ‘ - "thumbs up"

                pfSense+ 23.05.1 (ZFS)

                QOTOM-Q355G4 Quad Lan.
                CPUĀ  : Core i5 5250U, Ram : 8GB Kingston DDR3LV 1600
                LANĀ  : 4 x Intel 211, DiskĀ  : 240G SAMSUNG MZ7L3240HCHQ SSD

                1 Reply Last reply Reply Quote 0
                • V
                  viragomann @firewalled_lotusdew
                  last edited by

                  @firewalled_lotusdew said in Multiple static IP on different gateway:

                  You mean expect 123.176.60.77 to be routed via 123.176.59.1 ?

                  pfSense routes any packets destined to an IP out of its own subnets to the default gateway.
                  The point is if the gateway accepts a source IP outside of its subnet. Only the ISP will know the answer, but you can easily check it out.
                  For forwarding packets for such IPs, you can ask your ISP to route them to your primary IP, if he doesn't that anyway.

                  In the past, I had three different public subnets, all with their own network addresses, gateways and broadcast IPs on a single WAN interface. I configured only gateway of the first one on pfSense and all worked well out of the box.

                  1 Reply Last reply Reply Quote 0
                  • DerelictD
                    Derelict LAYER 8 Netgate @Patch
                    last edited by Derelict

                    @patch said in Multiple static IP on different gateway:

                    From a network configuration advice surely only the lest significant digit are relevant. The ones which a consistent between all of his IP address do not need to be publicly disclosed.

                    That and the network mask which may cover all public IP given.

                    Although I guess 123.176. is rubbish and perhaps the remainder is more accurate.

                    With a /22 netmask the last 10 bits are significant, not the last octet.

                    They should provide XX.YY.Real-address.real-address

                    XX.YY should be used to indicate they are identical for both the addresses and the provided gateways.

                    And, of course, the provided subnet masks.

                    Chattanooga, Tennessee, USA
                    A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                    DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                    Do Not Chat For Help! NO_WAN_EGRESS(TM)

                    1 Reply Last reply Reply Quote 0
                    • stephenw10S
                      stephenw10 Netgate Administrator
                      last edited by

                      Mmm, depending on which bits were swapped those subnets may or may not be inside the same /22. Currently they are shown as not being which would mean they could not share the same gateway.

                      F 1 Reply Last reply Reply Quote 0
                      • F
                        firewalled_lotusdew @stephenw10
                        last edited by

                        @stephenw10 Yes I realize that these IPs dont fall within the same subnet I think based on the calculations below. So I am assuming they cannot be routed
                        fc692e3a-ee86-461f-9771-f27a1ef6cae6-image.png

                        As you can see the range is from 123.176.56.X to 123.176.59.254.

                        So the static IPs 123.176.60.X and 123.176.62.X wont be routable via the gateway 123.176.59.1 I believe. Please let me know if i am understanding correctly ?

                        1 Reply Last reply Reply Quote 2
                        • stephenw10S
                          stephenw10 Netgate Administrator
                          last edited by

                          Yes, they cannot use the same gateway.

                          Hoe is the DSL modem configured here? Is it really a modem only? I assume you are not using PPPoE here?
                          Is the 'modem' itself acting as the gateway?

                          F 1 Reply Last reply Reply Quote 0
                          • F
                            firewalled_lotusdew @stephenw10
                            last edited by

                            @stephenw10 @stephenw10 The DSL modem has a fiber connection and it has 4 lan ports. One of the LAN port is configured into bridge mode which lands on the static IP confgured on pfSense WAN.

                            It might be possible to portmap the remaining 3 LAN into bridge mode as well and land them on seperate static IPs on any interface but that topology will mean I need multiple instances of pfSense I guess. I am trying to avoid that.

                            I dont know if a better idea would be to front the pfSense with a reverse proxy with different static IPs ... I am quite out of depth here.

                            stephenw10S 1 Reply Last reply Reply Quote 2
                            • stephenw10S
                              stephenw10 Netgate Administrator @firewalled_lotusdew
                              last edited by

                              @firewalled_lotusdew said in Multiple static IP on different gateway:

                              The DSL modem has a fiber connection

                              Like FTTC? If it's actually fiber to the modem that's not DSL.
                              Do you have access to the modem? Can you see what IP(s) it is using? It may not be if it really is bridging.

                              Steve

                              F 1 Reply Last reply Reply Quote 0
                              • F
                                firewalled_lotusdew @stephenw10
                                last edited by

                                @stephenw10 @stephenw10 @stephenw10 Yes FTTC - I have admin access to the modem. Its not using IP as its bridging.

                                PS: I am getting blocked from posting replies as its too frequent. Request to adjust my privileges if possible.

                                1 Reply Last reply Reply Quote 2
                                • stephenw10S
                                  stephenw10 Netgate Administrator
                                  last edited by

                                  You have 5 rep now you should be able to post more frequently.

                                  Can you see how the bridging is configured?

                                  F 1 Reply Last reply Reply Quote 0
                                  • F
                                    firewalled_lotusdew @stephenw10
                                    last edited by

                                    @stephenw10 Yes - attaching a snapshot of choices and currently set as bridge

                                    7a9663a8-e3d9-41b4-bc68-fac9b064075d-image.png

                                    1 Reply Last reply Reply Quote 0
                                    • stephenw10S
                                      stephenw10 Netgate Administrator
                                      last edited by

                                      Hmm, well the best thing there would be if you can get the ISP to provide static IPs in the same subnet, that share a gateway. Or route other IPs to your primary IP.

                                      You might just try using them with the original gateway and see hat happens.

                                      DerelictD 1 Reply Last reply Reply Quote 1
                                      • DerelictD
                                        Derelict LAYER 8 Netgate @stephenw10
                                        last edited by Derelict

                                        @firewalled_lotusdew Yeah I'd just put the VIPs on WAN and see what happens.

                                        Chattanooga, Tennessee, USA
                                        A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                                        DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                                        Do Not Chat For Help! NO_WAN_EGRESS(TM)

                                        chpalmerC 1 Reply Last reply Reply Quote 1
                                        • chpalmerC
                                          chpalmer @Derelict
                                          last edited by

                                          @derelict said in Multiple static IP on different gateway:

                                          @firewalled_lotusdew Yeah I'd just put the VIPs on WAN and see what happens.

                                          Exactly what I was going to chime in and say..

                                          Triggering snowflakes one by one..
                                          Intel(R) Core(TM) i5-4590T CPU @ 2.00GHz on an M400 WG box.

                                          F 1 Reply Last reply Reply Quote 0
                                          • F
                                            firewalled_lotusdew @chpalmer
                                            last edited by

                                            @chpalmer I have written to the ISP and asked them to reprovision the IP so that they are routable via a single gateway. Once that is done - I think its then trivial to alisas it via virtual IP.

                                            DerelictD 1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.