Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    one ISP 2 IP

    Scheduled Pinned Locked Moved General pfSense Questions
    30 Posts 3 Posters 2.0k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • A
      Antibiotic @stephenw10
      last edited by

      @stephenw10 So , understood that will work as VIP and should set on WAN in IP alias field?

      Screenshot_9-6-2024_25151_192.168.20.1.jpeg

      pfSense plus 24.11 on Topton mini PC
      CPU: Intel N100
      NIC: Intel i-226v 4 pcs
      RAM : 16 GB DDR5
      Disk: 128 GB NVMe
      Brgds, Archi

      1 Reply Last reply Reply Quote 0
      • stephenw10S
        stephenw10 Netgate Administrator
        last edited by

        Yes you would add it as a IPAlias VIP on the WAN. Firewall > Virtual IPs.

        But that screenshot is from the dhcp client setup which is nothing to do with it.

        A 2 Replies Last reply Reply Quote 0
        • A
          Antibiotic @stephenw10
          last edited by

          @stephenw10 Ah, firewall - VIP. Did search with closed eyes)))

          pfSense plus 24.11 on Topton mini PC
          CPU: Intel N100
          NIC: Intel i-226v 4 pcs
          RAM : 16 GB DDR5
          Disk: 128 GB NVMe
          Brgds, Archi

          1 Reply Last reply Reply Quote 1
          • A
            Antibiotic @stephenw10
            last edited by Antibiotic

            @stephenw10 This VIP should work like normal WAN IP. I mean regarding provider speed , latency and etc? Can pfBlockerNG filtering VIP? Can use pfSesne OpenVPN client on him? Like me understood IP Alias use all benefits as normal NAT.

            pfSense plus 24.11 on Topton mini PC
            CPU: Intel N100
            NIC: Intel i-226v 4 pcs
            RAM : 16 GB DDR5
            Disk: 128 GB NVMe
            Brgds, Archi

            1 Reply Last reply Reply Quote 0
            • stephenw10S
              stephenw10 Netgate Administrator
              last edited by stephenw10

              Yes you can run services on it directly. You can add NAT rules to or from it for services or internal subnets.

              Your ISP has to provide the IP(s) though of course.

              A 2 Replies Last reply Reply Quote 0
              • A
                Antibiotic @stephenw10
                last edited by

                @stephenw10 So, lets say will have 2 WAN IP and 3 additional NIC's. Can I use ona LAN for one WAN IP and the rest 2 for other WAN IP only? or can use on one LAN this 2 WAN IP for different types of traffic?

                pfSense plus 24.11 on Topton mini PC
                CPU: Intel N100
                NIC: Intel i-226v 4 pcs
                RAM : 16 GB DDR5
                Disk: 128 GB NVMe
                Brgds, Archi

                1 Reply Last reply Reply Quote 0
                • A
                  Antibiotic @stephenw10
                  last edited by Antibiotic

                  @stephenw10 said in one ISP 2 IP:

                  Your ISP has to provide the IP(s) though of course

                  What are do you mean?

                  pfSense plus 24.11 on Topton mini PC
                  CPU: Intel N100
                  NIC: Intel i-226v 4 pcs
                  RAM : 16 GB DDR5
                  Disk: 128 GB NVMe
                  Brgds, Archi

                  1 Reply Last reply Reply Quote 0
                  • stephenw10S
                    stephenw10 Netgate Administrator
                    last edited by

                    You can use the WAN IPs for whatever traffic you can match with outbound NAT rules. So that might be all traffic from an internal subnet. Or it could just be a single internal host.

                    Most ISPs will only provide you a single public IP unless you pay them to provide additional IPs. Actually using them does depend on how they provide it to you.

                    JKnottJ 1 Reply Last reply Reply Quote 0
                    • JKnottJ
                      JKnott @stephenw10
                      last edited by

                      @stephenw10 said in one ISP 2 IP:

                      Most ISPs will only provide you a single public IP unless you pay them to provide additional IPs

                      My ISP (Rogers) provides two. There are two Ethernet ports on the back of the modem and they have different addresses. I don't pay extra for it. I used to use the 2nd for testing, until a pfSense update broke that. There's a thread about that here somewhere.

                      PfSense running on Qotom mini PC
                      i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
                      UniFi AC-Lite access point

                      I haven't lost my mind. It's around here...somewhere...

                      A 1 Reply Last reply Reply Quote 1
                      • A
                        Antibiotic @JKnott
                        last edited by Antibiotic

                        @JKnott The same)))
                        My ISP provides also two IP. I still thinking, request or not second IP, because they will make second line in this case to my apartments and no any ideas for this moment how better to use this second IP or have benefits)))Speed will the same 1gb up/down. Could somebody provide some tips, how can use and for what second free IP?Subnet should be the same as my first IP, like me understanding better to use second pfSense interface as additional WAN, but it mean minus interface for my local subnets))) Still in doubt

                        pfSense plus 24.11 on Topton mini PC
                        CPU: Intel N100
                        NIC: Intel i-226v 4 pcs
                        RAM : 16 GB DDR5
                        Disk: 128 GB NVMe
                        Brgds, Archi

                        1 Reply Last reply Reply Quote 0
                        • stephenw10S
                          stephenw10 Netgate Administrator
                          last edited by

                          Is it a static IP? Second dhcp lease?

                          A JKnottJ 2 Replies Last reply Reply Quote 0
                          • A
                            Antibiotic @stephenw10
                            last edited by

                            @stephenw10 Both have static IP. But for this moment use over DCHP on WAN. Is any benefits to set my first IP as static, because use DCHP lease on mY local subnets?

                            pfSense plus 24.11 on Topton mini PC
                            CPU: Intel N100
                            NIC: Intel i-226v 4 pcs
                            RAM : 16 GB DDR5
                            Disk: 128 GB NVMe
                            Brgds, Archi

                            1 Reply Last reply Reply Quote 0
                            • JKnottJ
                              JKnott @stephenw10
                              last edited by

                              @stephenw10 said in one ISP 2 IP:

                              NETGATE
                              ADMINISTRATOR
                              5 minutes ago

                              Is it a static IP? Second dhcp lease?

                              Mine are DHCP. For some reason, the MTU is smaller on the 2nd.

                              PfSense running on Qotom mini PC
                              i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
                              UniFi AC-Lite access point

                              I haven't lost my mind. It's around here...somewhere...

                              A 1 Reply Last reply Reply Quote 0
                              • stephenw10S
                                stephenw10 Netgate Administrator
                                last edited by

                                No there's no benefit and in fact there's a good chance your ISP still requires you to pull a lease even if it passes you the same IP every time.

                                If both IPs really are fixed then you should be able to just add the second IP as an IPAlias VIP on WAN and use it however you want.

                                A 2 Replies Last reply Reply Quote 0
                                • A
                                  Antibiotic @JKnott
                                  last edited by

                                  @JKnott Can you set as static?and check MTU

                                  pfSense plus 24.11 on Topton mini PC
                                  CPU: Intel N100
                                  NIC: Intel i-226v 4 pcs
                                  RAM : 16 GB DDR5
                                  Disk: 128 GB NVMe
                                  Brgds, Archi

                                  JKnottJ 1 Reply Last reply Reply Quote 0
                                  • A
                                    Antibiotic @stephenw10
                                    last edited by Antibiotic

                                    @stephenw10 said in one ISP 2 IP:

                                    If both IPs really are fixed

                                    Is it possible to check this on my side, without calling to ISP? Because I use as static and over DCHP and did not found any difference)))

                                    pfSense plus 24.11 on Topton mini PC
                                    CPU: Intel N100
                                    NIC: Intel i-226v 4 pcs
                                    RAM : 16 GB DDR5
                                    Disk: 128 GB NVMe
                                    Brgds, Archi

                                    1 Reply Last reply Reply Quote 0
                                    • A
                                      Antibiotic @stephenw10
                                      last edited by

                                      @stephenw10 said in one ISP 2 IP:

                                      even if it passes you the same IP every time

                                      20 YEARS , have the same IP))

                                      pfSense plus 24.11 on Topton mini PC
                                      CPU: Intel N100
                                      NIC: Intel i-226v 4 pcs
                                      RAM : 16 GB DDR5
                                      Disk: 128 GB NVMe
                                      Brgds, Archi

                                      1 Reply Last reply Reply Quote 0
                                      • stephenw10S
                                        stephenw10 Netgate Administrator
                                        last edited by

                                        Ha, well that's a long lease! The fact that it can use dhcp though implies the ISP could change it. They probably just default to the same IP unless there's a reason to change.

                                        Are you spoofing the MAC address to keep that for 20yrs?

                                        A 1 Reply Last reply Reply Quote 0
                                        • A
                                          Antibiotic @stephenw10
                                          last edited by Antibiotic

                                          @stephenw10 No, MAC address original from pfSense, when lets say me replacing my router to new one, my ISP automatically assign this new MAC to my IP that all)))Just appear web page from ISP , please wait a 3 mins and bingo)))

                                          pfSense plus 24.11 on Topton mini PC
                                          CPU: Intel N100
                                          NIC: Intel i-226v 4 pcs
                                          RAM : 16 GB DDR5
                                          Disk: 128 GB NVMe
                                          Brgds, Archi

                                          1 Reply Last reply Reply Quote 0
                                          • stephenw10S
                                            stephenw10 Netgate Administrator
                                            last edited by

                                            Mmm, well somehow assigned to your connection then. Potentially you might be able to use a static IP. The ISP would know but most ISPs are difficult to information from. 😉

                                            A 2 Replies Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.