Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Question Transparent Bridge and Firewall

    Scheduled Pinned Locked Moved Firewalling
    4 Posts 2 Posters 1.2k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • C
      cbutcher
      last edited by

      Hello,

      I need to setup a transparent bridge. I found this in the forum http://forum.pfsense.org/index.php?topic=50711.0
      Great read very easy to follow.

      Here is my situation-

      I have 100 meg fiber line with a Ethernet hand off. Currently my provider installed a Cisco ME3400 for the hand off. I was assigned a block of IP's
      77.x.x.x/30 but actually needed a class c.

      So I went ahead and ordered a class c. Now I have 2 separate IP blocks.

      WAN -> 77.x.x.x/30
      LAN -> 66.x.x.x/24

      I have to use the 77.x.x.x for the hand off to them. Is it possible to bridge the 2 different blocks together?

      Example -
      WAN <–> 77.x.x.x <--> 66.x.x.x

      I hope that makes sense.

      Thanks.
      Chuck

      1 Reply Last reply Reply Quote 0
      • P
        podilarius
        last edited by

        You could have you ISP route the 66 network to one of your 77 addresses. This would be an ideal routed solution. You will need to disable nat. I would not bridge if I where you.

        1 Reply Last reply Reply Quote 0
        • C
          cbutcher
          last edited by

          They told me that they assigned the 66 block to the same vlan as the 77 block.

          So if I just do a standard router setup.

          Wan - Static ip 77.x.x.x
          Lan - 66.x.x.x block using DHCP / and no Nat

          This should be ok?

          Really appreciate the help.

          Thanks,
          Chuck

          1 Reply Last reply Reply Quote 0
          • P
            podilarius
            last edited by

            No. That I'd not sufficient. The ISP must route the 66 block to a 77 address. Otherwise you are going to have to bridge or perhaps proxy arp.

            1 Reply Last reply Reply Quote 0
            • First post
              Last post
            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.