Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    1 wan, 3 lans; 3 lan subnet on one interface howto

    Scheduled Pinned Locked Moved Routing and Multi WAN
    5 Posts 4 Posters 2.9k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • T Offline
      tammer
      last edited by

      I have a big question. How can I realize the following system with pfsense, without a vlan switch?
      I have a single uplink with fixed ip. I wanna make 3 lan networks on one interface (In the cmts I have only 1 network socket)
      (The cmts is only a bridge, not a router):
      My pfsense box is x.y.25.2/24 (wan) and 10.0.0.1 (lan)
      1. 10.0.1.0/24 for my cable modems and my cmts [gw must be my pfsense]
      2. 10.0.0.0/24 for my subscribers (these addresses are assigned to the computers) - that's OK, it's the basic config!
      3. x.y.25.0/24 public ip address range for my subscribers, who have special requests. [gw must be my pfsense box]

      Thank you for your help.

      1 Reply Last reply Reply Quote 0
      • C Offline
        cmb
        last edited by

        Multiple IP subnets on the same broadcast domain is a bad idea and not supported. You need a physical interface or VLAN interface for each subnet.

        1 Reply Last reply Reply Quote 0
        • T Offline
          tacfit
          last edited by

          lol, buy a VLAn switch. They're not too much, and you'd only need to cover 4 ports. 3 ports are dedicated to their appropriate VLANs, and then the last is tagged with each, and connected to your pfSense box. It's a better setup.

          1 Reply Last reply Reply Quote 0
          • P Offline
            Pootle
            last edited by

            Definitely separate the subnets - linksys have just launched a new cheap switch with VLAN capability (slm2005 / slm2008) cheapest I've so far seen

            1 Reply Last reply Reply Quote 0
            • T Offline
              tacfit
              last edited by

              Wow, that is cheap. VLAN capability seems to be what separates the boys from the men, so to speak. The prices tend to jump like crazy.

              I actually recommened pfSense in a VM on a Dell desktop for someone recently, and it this option was cheaper than a decent router with VLAN abilities. (And I've convinced it will be more flexible, also) Go pfSense!

              1 Reply Last reply Reply Quote 0
              • First post
                Last post
              Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.