ISP handed me a block of IP's confused as how to configure as worded
-
So they are routing that 71.100.8.232/29 to you would be the way I would read that.
And on pfsense wan you would set IP as 71.100.1.54/30 with its gateway as 71.100.1.53
Your wanting to use this /29 behind pfsense without nat?
https://docs.netgate.com/pfsense/en/latest/recipes/route-public-ip-addresses.html
Or if that /29 is routed to you, you could also just use them as vips on your pfsense wan.
-
WAN interface: 71.100.1.54
mask: 255.255.255.252 (i.e., /30)
gateway: 71.100.1.53LAN interface: 71.100.8.233
mask: 255.255.255.248 (i.e., /29)
gateway: nonestart there and confirm connectivity.
it seems like you could then also make use of 71.100.8.234 through .238 (using the same mask and 'none' gateway) on any additional LAN interfaces your box has, as LAGG interfaces, or on downstream interfaces. but that part a little unclear based on the limited information you've provided.
-
@cyberconsultants I am doing some testing now. My plan is two have two separate networks on different static ips. I am using a netgate XG-1537, With an Intel X710BM2 network card. To handle my Wan and block of static ip's, to each there own opt port to two dream machines. ideally with no nat on the pfsense box. I want the dream machines to handle all firewall/nat/routing for each network.
. -
@jason4532 should be able to make that work as-described.
-
@cyberconsultants
Wan is working as it should. Lan is configured with the .8.233 with dhcp have connectivity.
I am trying to setup a opt port with the .8.235, I am getting a error .8.235 is being used by or overlaps with Lan 71.181.8.233/29 -
@jason4532 can you post a screencap of the LAN interface config?
assuming LAN interface is now on the 71.100.8.232/29 subnet, isn't your desired config to now assign .235 to a downstream "WAN" interface on one of the UDMs?
-
@jason4532 said in ISP handed me a block of IP's confused as how to configure as worded:
is being used by or overlaps with Lan 71.181.8.233/29
Because it does 8.235 falls inside the .232/29
If you want to use different IPs on lan side interfaces of that /29 you would have to break it up to 2 /30s
yeah assigned you a "LAN SUBNET: 71.100.8.232 255.255.255.248" that they routed to you.. if you want to create 2 networks from that you would have to subnet it 2 /30's or they would overlap.
Or use the .233 on pfsense and then setup clients on that network with with .234 - .238
An intelligent man is sometimes forced to be drunk to spend time with his fools
If you get confused: Listen to the Music Play
Please don't Chat/PM me for help, unless mod related
SG-4860 24.11 | Lab VMs 2.8, 24.11 -
@johnpoz said in ISP handed me a block of IP's confused as how to configure as worded:
If you want to use different IPs on lan side interfaces of that /29 you would have to break it up to 2 /30s
since that's but one of many ways to do what it seems like OP may be trying to accomplish, we should let them clarify before suggesting any one possible config.
-
@cyberconsultants He can not use multiple IPs on different pfsense interfaces that overlap..
If he wants multiple IPs on pfsense out of that /29 he would have to break it down so they don't overlap..
He could use vips and then nat.. But if he wants the native network on pfsense and clients behind it and wants more than 1 network he would have to subnet.. There is no other way around it.
-
@johnpoz said in ISP handed me a block of IP's confused as how to configure as worded:
If he wants
But if he wants
exactly. they should clarify—and then potential solutions might be suggested accordingly.
throwing everything you can possibly imagine out there plus gratiutious snark (plus insta-edits) is super confusing.
-
@jason4532 said in ISP handed me a block of IP's confused as how to configure as worded:
My plan is two have two separate networks on different static ips
ideally with no nat on the pfsense box
That seemed pretty clear to me to what he is wanting to do.. Not sure what is confusing about that for you.
-
@cyberconsultants basically all I am trying to do is the following.
I have two dream machines I want each to have their own static Wan ip. I plan on using the pfsense box to give each DM box their own static ip via their own port from the pfsense box . I don't want pfsense to do nat/firewall for either network.
-
@jason4532 so break that /29 to 2 /30s and then there you go.. Just like already went over.. But @cyberconsultants seems to be confused..
An intelligent man is sometimes forced to be drunk to spend time with his fools
If you get confused: Listen to the Music Play
Please don't Chat/PM me for help, unless mod related
SG-4860 24.11 | Lab VMs 2.8, 24.11 -
@johnpoz said in ISP handed me a block of IP's confused as how to configure as worded:
yeah assigned you a "LAN SUBNET: 71.100.8.232 255.255.255.248" that they routed to you.. if you want to create 2 networks from that you would have to subnet it 2 /30's or they would overlap
Does the isp need to subnet it or can I just set my interfaces with /30 ?
-
@jason4532 no the isp doesn't need to do anything.. They already routed the /29 to you.. Just put one /30 on interface 1 and the other /30 on interface 2
-
@jason4532 still would like to see LAN interface config screencap to confirm because part of your earlier reply was a bit confusing. (i.e., "Lan is configured with the .8.233 with dhcp have connectivity.")
set pfSense configuration aside for a moment. how are the UDMs going to connect to the pfSense host? you want them to connect directly to their own individual pfSense interfaces on the Intel NIC, correct?
if so, you could bridge LAN and OPT interfaces (Interfaces / Bridges) which would allow both interfaces to occupy the same subnet.
-
@johnpoz said in ISP handed me a block of IP's confused as how to configure as worded:
But @cyberconsultants seems to be confused..
i henceforth dub thee King Of Kludge!
-
@cyberconsultants How is subnetting a /29 that is routed to you to 2 /30s kluge?
-
@johnpoz because bridging the interfaces might be the more elegant solution.
*kludge
-
@cyberconsultants said in ISP handed me a block of IP's confused as how to configure as worded:
bridging the interfaces
<rolleyes> yeah have fun with that.. And that clearly does not meet his request of
have two separate networks
Do you need "separate" defined for you?
