Multi IP Single WAN

apmuthu · Dec 17, 2009, 3:29 PM

pfSense v1.2.3 RC1
One LAN - 192.168.10.1/24
One WAN - Static IPs - 15.25.35.60/25
How do we forward :
all WAN traffic from StaticIP 15.25.35.61 to LAN achine at 192.168.10.18 ?
all WAN traffic from StaticIP 15.25.35.62 to LAN achine at 192.168.10.30 ?

GruensFroeschli · Dec 17, 2009, 11:07 PM

Create VIPs for your additional IPs.
Create portforwards: either 1:1 NAT, or normal portforwards with AoN rules.

apmuthu · Dec 18, 2009, 4:15 AM

Thanks!

The following did the job:

Firewall -> Virtual IPs  -> +
Type: Proxy ARP
Interface: WAN
IP Addresses(s): Type:    Single Address
                       Address: Global IP2

Firewall -> Aliases => +
Name: Server1Alias
Type: Host(s)
Host(s): LAN IP of Server1

Firewall -> NAT -> NAT 1:1 -> +
Interface: WAN
External subnet: GlobalIP2
Internal subnet: Server1Alias

Firewall -> Rules
Action: Pass
Interface: WAN
Protocol: any
Source: Any
Destination: Type:     Single Host or Alias
                 Address: Server1Alias

labasus · Dec 20, 2009, 11:06 AM

Thx for sharing your solution, but maybe somebody know it works with different public subnets?

Public WAN IPs
xx.xx.1.1/29 gw xx.xx.1.1
xx.xx.2.1/29 gw xx.xx.2.1
xx.xx.3.1/29 gw xx.xx.3.1
Local LAN IPs
192.168.0.0/16

Problem: to handle with NAT 1:1 from public to lan IPs