2 pfsense, different LAN:s but WAN on same subnet (SOLVED)
-
We're replacing our 2 IPcop:s with pfsense, the 2 firewalls protects different LAN:s.
We have several public ip:s in 3 subnets, they all come in on one line from isp to our switch:
10.10.65.212/29 - to fw1, WAN adress here
10.10.48.41/29 - to fw2, WAN adress here
10.10.189.73/29 - here's the problem!
Today:
10.10.189.74/29 - to fw1 (pfsense, VirtualIP)
10.10.189.76/29 - to fw2 (IPCop, eth2:0)Now we want to have ip 10.10.189.75 on a third firewalls (fw3) WAN - this is a pfsense-box to replace the IPCop box with after testing.
But this doesn't work - all traffic to 10.10.189.75 goes to fw1. (10.10.189.76 correctly goes to fw2.)
I suppose this is a pretty simple issue, just can't figure out the best way to fix it?
Different masks, add routing (for one host??), not use VirtualIP but … ? -
I gave this a second thought, and realized this just can't be possible!
So down to the cellar again, testing a third cable and another port on the switch - now it works!Nothing wrong with config, most likely the switch "remembering" where that host is. (Sometimes I miss those good ol' hubs! ;) )