ISP handed me a block of IP's confused as how to configure as worded

jason4532

@cyberconsultants I am doing some testing now. My plan is two have two separate networks on different static ips. I am using a netgate XG-1537, With an Intel X710BM2 network card. To handle my Wan and block of static ip's, to each there own opt port to two dream machines. ideally with no nat on the pfsense box. I want the dream machines to handle all firewall/nat/routing for each network.
.

tinfoilmatt

@jason4532 should be able to make that work as-described.

jason4532

@cyberconsultants

Wan is working as it should. Lan is configured with the .8.233 with dhcp have connectivity.
I am trying to setup a opt port with the .8.235, I am getting a error .8.235 is being used by or overlaps with Lan 71.181.8.233/29

tinfoilmatt

@jason4532 can you post a screencap of the LAN interface config?

assuming LAN interface is now on the 71.100.8.232/29 subnet, isn't your desired config to now assign .235 to a downstream "WAN" interface on one of the UDMs?

johnpoz

@jason4532 said in ISP handed me a block of IP's confused as how to configure as worded:

is being used by or overlaps with Lan 71.181.8.233/29

Because it does 8.235 falls inside the .232/29

If you want to use different IPs on lan side interfaces of that /29 you would have to break it up to 2 /30s

yeah assigned you a "LAN SUBNET: 71.100.8.232 255.255.255.248" that they routed to you.. if you want to create 2 networks from that you would have to subnet it 2 /30's or they would overlap.

Or use the .233 on pfsense and then setup clients on that network with with .234 - .238

tinfoilmatt

@johnpoz said in ISP handed me a block of IP's confused as how to configure as worded:

If you want to use different IPs on lan side interfaces of that /29 you would have to break it up to 2 /30s

since that's but one of many ways to do what it seems like OP may be trying to accomplish, we should let them clarify before suggesting any one possible config.

johnpoz

@cyberconsultants He can not use multiple IPs on different pfsense interfaces that overlap..

If he wants multiple IPs on pfsense out of that /29 he would have to break it down so they don't overlap..

He could use vips and then nat.. But if he wants the native network on pfsense and clients behind it and wants more than 1 network he would have to subnet.. There is no other way around it.

tinfoilmatt

@johnpoz said in ISP handed me a block of IP's confused as how to configure as worded:

If he wants

But if he wants

exactly. they should clarify—and then potential solutions might be suggested accordingly.

throwing everything you can possibly imagine out there plus gratiutious snark (plus insta-edits) is super confusing.

johnpoz

@jason4532 said in ISP handed me a block of IP's confused as how to configure as worded:

My plan is two have two separate networks on different static ips

ideally with no nat on the pfsense box

That seemed pretty clear to me to what he is wanting to do.. Not sure what is confusing about that for you.

jason4532

@cyberconsultants basically all I am trying to do is the following.

I have two dream machines I want each to have their own static Wan ip. I plan on using the pfsense box to give each DM box their own static ip via their own port from the pfsense box . I don't want pfsense to do nat/firewall for either network.

johnpoz

@jason4532 so break that /29 to 2 /30s and then there you go.. Just like already went over.. But @cyberconsultants seems to be confused..

jason4532

@johnpoz said in ISP handed me a block of IP's confused as how to configure as worded:

yeah assigned you a "LAN SUBNET: 71.100.8.232 255.255.255.248" that they routed to you.. if you want to create 2 networks from that you would have to subnet it 2 /30's or they would overlap

Does the isp need to subnet it or can I just set my interfaces with /30 ?

johnpoz

@jason4532 no the isp doesn't need to do anything.. They already routed the /29 to you.. Just put one /30 on interface 1 and the other /30 on interface 2

tinfoilmatt

@jason4532 still would like to see LAN interface config screencap to confirm because part of your earlier reply was a bit confusing. (i.e., "Lan is configured with the .8.233 with dhcp have connectivity.")

set pfSense configuration aside for a moment. how are the UDMs going to connect to the pfSense host? you want them to connect directly to their own individual pfSense interfaces on the Intel NIC, correct?

if so, you could bridge LAN and OPT interfaces (Interfaces / Bridges) which would allow both interfaces to occupy the same subnet.

tinfoilmatt

@johnpoz said in ISP handed me a block of IP's confused as how to configure as worded:

But @cyberconsultants seems to be confused..

i henceforth dub thee King Of Kludge!

johnpoz

@cyberconsultants How is subnetting a /29 that is routed to you to 2 /30s kluge?

tinfoilmatt

@johnpoz because bridging the interfaces might be the more elegant solution.

*kludge

johnpoz

@cyberconsultants said in ISP handed me a block of IP's confused as how to configure as worded:

bridging the interfaces

<rolleyes> yeah have fun with that.. And that clearly does not meet his request of

have two separate networks

Do you need "separate" defined for you?

tinfoilmatt

@johnpoz do the words 'additional routing overhead' mean anything to you? when's the last time a curmudgeon like you had an earnest discussion about the OSI model, internal dialogue or otherwise?

johnpoz

@cyberconsultants routing overhead for 2 segments? So which do you think is more optimal routing the traffic or bridging it? Which he then still has to route the /29 anyway.

Here is my opinion, it sure and the hell is not bridging it.. He would be better off buying a 20$ gig switch and using that vs software bridging on his "router"..

But sure you go ahead and walk him through the bridge setup.. He couldn't even figure out what the isp was telling him, have fun walking him through the bridging setup..

You know what kluge is, trying to leverage discrete interfaces as switch ports via software bridge..