Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    one ISP 2 IP

    Scheduled Pinned Locked Moved General pfSense Questions
    30 Posts 3 Posters 2.0k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • stephenw10S
      stephenw10 Netgate Administrator
      last edited by

      You can use the WAN IPs for whatever traffic you can match with outbound NAT rules. So that might be all traffic from an internal subnet. Or it could just be a single internal host.

      Most ISPs will only provide you a single public IP unless you pay them to provide additional IPs. Actually using them does depend on how they provide it to you.

      JKnottJ 1 Reply Last reply Reply Quote 0
      • JKnottJ
        JKnott @stephenw10
        last edited by

        @stephenw10 said in one ISP 2 IP:

        Most ISPs will only provide you a single public IP unless you pay them to provide additional IPs

        My ISP (Rogers) provides two. There are two Ethernet ports on the back of the modem and they have different addresses. I don't pay extra for it. I used to use the 2nd for testing, until a pfSense update broke that. There's a thread about that here somewhere.

        PfSense running on Qotom mini PC
        i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
        UniFi AC-Lite access point

        I haven't lost my mind. It's around here...somewhere...

        A 1 Reply Last reply Reply Quote 1
        • A
          Antibiotic @JKnott
          last edited by Antibiotic

          @JKnott The same)))
          My ISP provides also two IP. I still thinking, request or not second IP, because they will make second line in this case to my apartments and no any ideas for this moment how better to use this second IP or have benefits)))Speed will the same 1gb up/down. Could somebody provide some tips, how can use and for what second free IP?Subnet should be the same as my first IP, like me understanding better to use second pfSense interface as additional WAN, but it mean minus interface for my local subnets))) Still in doubt

          pfSense plus 24.11 on Topton mini PC
          CPU: Intel N100
          NIC: Intel i-226v 4 pcs
          RAM : 16 GB DDR5
          Disk: 128 GB NVMe
          Brgds, Archi

          1 Reply Last reply Reply Quote 0
          • stephenw10S
            stephenw10 Netgate Administrator
            last edited by

            Is it a static IP? Second dhcp lease?

            A JKnottJ 2 Replies Last reply Reply Quote 0
            • A
              Antibiotic @stephenw10
              last edited by

              @stephenw10 Both have static IP. But for this moment use over DCHP on WAN. Is any benefits to set my first IP as static, because use DCHP lease on mY local subnets?

              pfSense plus 24.11 on Topton mini PC
              CPU: Intel N100
              NIC: Intel i-226v 4 pcs
              RAM : 16 GB DDR5
              Disk: 128 GB NVMe
              Brgds, Archi

              1 Reply Last reply Reply Quote 0
              • JKnottJ
                JKnott @stephenw10
                last edited by

                @stephenw10 said in one ISP 2 IP:

                NETGATE
                ADMINISTRATOR
                5 minutes ago

                Is it a static IP? Second dhcp lease?

                Mine are DHCP. For some reason, the MTU is smaller on the 2nd.

                PfSense running on Qotom mini PC
                i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
                UniFi AC-Lite access point

                I haven't lost my mind. It's around here...somewhere...

                A 1 Reply Last reply Reply Quote 0
                • stephenw10S
                  stephenw10 Netgate Administrator
                  last edited by

                  No there's no benefit and in fact there's a good chance your ISP still requires you to pull a lease even if it passes you the same IP every time.

                  If both IPs really are fixed then you should be able to just add the second IP as an IPAlias VIP on WAN and use it however you want.

                  A 2 Replies Last reply Reply Quote 0
                  • A
                    Antibiotic @JKnott
                    last edited by

                    @JKnott Can you set as static?and check MTU

                    pfSense plus 24.11 on Topton mini PC
                    CPU: Intel N100
                    NIC: Intel i-226v 4 pcs
                    RAM : 16 GB DDR5
                    Disk: 128 GB NVMe
                    Brgds, Archi

                    JKnottJ 1 Reply Last reply Reply Quote 0
                    • A
                      Antibiotic @stephenw10
                      last edited by Antibiotic

                      @stephenw10 said in one ISP 2 IP:

                      If both IPs really are fixed

                      Is it possible to check this on my side, without calling to ISP? Because I use as static and over DCHP and did not found any difference)))

                      pfSense plus 24.11 on Topton mini PC
                      CPU: Intel N100
                      NIC: Intel i-226v 4 pcs
                      RAM : 16 GB DDR5
                      Disk: 128 GB NVMe
                      Brgds, Archi

                      1 Reply Last reply Reply Quote 0
                      • A
                        Antibiotic @stephenw10
                        last edited by

                        @stephenw10 said in one ISP 2 IP:

                        even if it passes you the same IP every time

                        20 YEARS , have the same IP))

                        pfSense plus 24.11 on Topton mini PC
                        CPU: Intel N100
                        NIC: Intel i-226v 4 pcs
                        RAM : 16 GB DDR5
                        Disk: 128 GB NVMe
                        Brgds, Archi

                        1 Reply Last reply Reply Quote 0
                        • stephenw10S
                          stephenw10 Netgate Administrator
                          last edited by

                          Ha, well that's a long lease! The fact that it can use dhcp though implies the ISP could change it. They probably just default to the same IP unless there's a reason to change.

                          Are you spoofing the MAC address to keep that for 20yrs?

                          A 1 Reply Last reply Reply Quote 0
                          • A
                            Antibiotic @stephenw10
                            last edited by Antibiotic

                            @stephenw10 No, MAC address original from pfSense, when lets say me replacing my router to new one, my ISP automatically assign this new MAC to my IP that all)))Just appear web page from ISP , please wait a 3 mins and bingo)))

                            pfSense plus 24.11 on Topton mini PC
                            CPU: Intel N100
                            NIC: Intel i-226v 4 pcs
                            RAM : 16 GB DDR5
                            Disk: 128 GB NVMe
                            Brgds, Archi

                            1 Reply Last reply Reply Quote 0
                            • stephenw10S
                              stephenw10 Netgate Administrator
                              last edited by

                              Mmm, well somehow assigned to your connection then. Potentially you might be able to use a static IP. The ISP would know but most ISPs are difficult to information from. 😉

                              A 2 Replies Last reply Reply Quote 0
                              • A
                                Antibiotic @stephenw10
                                last edited by Antibiotic

                                @stephenw10 Idk, how they make this, appear a web page from my ISP, when I try to browsing, on this page should put my agreement number from my ISP and wait a few time , that all)))So , looks like it is full static ? Is it correct?

                                pfSense plus 24.11 on Topton mini PC
                                CPU: Intel N100
                                NIC: Intel i-226v 4 pcs
                                RAM : 16 GB DDR5
                                Disk: 128 GB NVMe
                                Brgds, Archi

                                1 Reply Last reply Reply Quote 0
                                • A
                                  Antibiotic @stephenw10
                                  last edited by Antibiotic

                                  @stephenw10 Also have a question, if set as static IP better set MTU and MSS manually on WAN and LAN in this case?

                                  pfSense plus 24.11 on Topton mini PC
                                  CPU: Intel N100
                                  NIC: Intel i-226v 4 pcs
                                  RAM : 16 GB DDR5
                                  Disk: 128 GB NVMe
                                  Brgds, Archi

                                  1 Reply Last reply Reply Quote 0
                                  • JKnottJ
                                    JKnott @Antibiotic
                                    last edited by

                                    @Antibiotic said in one ISP 2 IP:

                                    @JKnott
                                    about an hour ago

                                    @JKnott Can you set as static?and check MTU

                                    I haven't tried to set static and wouldn't without knowing an address that's outside the pool.

                                    PfSense running on Qotom mini PC
                                    i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
                                    UniFi AC-Lite access point

                                    I haven't lost my mind. It's around here...somewhere...

                                    A 1 Reply Last reply Reply Quote 0
                                    • A
                                      Antibiotic @JKnott
                                      last edited by

                                      @JKnott Is it better to set manually MTU and MSS on WAN and LAN?

                                      pfSense plus 24.11 on Topton mini PC
                                      CPU: Intel N100
                                      NIC: Intel i-226v 4 pcs
                                      RAM : 16 GB DDR5
                                      Disk: 128 GB NVMe
                                      Brgds, Archi

                                      1 Reply Last reply Reply Quote 0
                                      • stephenw10S
                                        stephenw10 Netgate Administrator
                                        last edited by

                                        MTU/MSS wouldn't really be affected.

                                        Only way to know for sure if it will accept a static IP is to ask the ISP or try it and wait for it to fail. 😉

                                        A 1 Reply Last reply Reply Quote 0
                                        • A
                                          Antibiotic @stephenw10
                                          last edited by

                                          @stephenw10 When use static IP , its never fail. What I mean is possible to hardcoded MTU and MSS on WAN? and if yes should me also set MTU and MSS on LAN than?

                                          pfSense plus 24.11 on Topton mini PC
                                          CPU: Intel N100
                                          NIC: Intel i-226v 4 pcs
                                          RAM : 16 GB DDR5
                                          Disk: 128 GB NVMe
                                          Brgds, Archi

                                          1 Reply Last reply Reply Quote 0
                                          • stephenw10S
                                            stephenw10 Netgate Administrator
                                            last edited by

                                            The default value of 1500 should be fine whether it's static or DHCP. I would not expect to need to set it. On either interface.

                                            A 1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.