5 WANS to a single Lan with some http/https servers on

kejianshi · Jul 31, 2013, 2:55 AM

I think with so little information its hard for people to answer. Basically, you said "I paid for 5 IPs. What do I do now?"

Question. How many public IPs do you expect to reach your servers?

monster400 · Jul 31, 2013, 1:00 PM

i have wan ips and i will like to get 1 to some of the servers and the ip´s are leased by mac adresse

kejianshi · Jul 31, 2013, 3:28 PM

What you want to do is straight forward and easy but might get long if you have no experience with multiple public IPs.

kejianshi · Jul 31, 2013, 3:29 PM

Take a look through this ongoing thread to see what I'm talking about. This is still in process.

http://forum.pfsense.org/index.php/topic,64899.30.html

monster400 · Jul 31, 2013, 4:24 PM

hey sorry just saw you reply let just do it i think i can do it with you help

kejianshi · Jul 31, 2013, 4:40 PM

Whats ISP are you using?

monster400 · Jul 31, 2013, 4:42 PM

https://www.fullrate.dk/ denmark

monster400 · Jul 31, 2013, 4:45 PM

i have locked these
31/07-2013 15:49:58 00:0c:29:cf:01:94 to 95.166.xxx.xxx
30/07-2013 15:50:35 00:0c:29:cf:01:b2 to 95.166.xxx.xxx
30/07-2013 15:49:12 00:0c:29:cf:01:a8 to 95.166.xxx.xxx
30/07-2013 15:49:11 00:0c:29:cf:01:9e to 95.166.xxx.xxx
30/07-2013 14:50:25 00:0c:29:cf:01:80 to 95.166.xxx.xxx

kejianshi · Jul 31, 2013, 4:53 PM

OK - I checked your ISP. Its Danish.
I see that they do give up to 5 IPs and its done via DHCP. So, thats correct.
Are you using the zyxel modem? If so, is it only acting as modem or is it also routing, DHCP, etc?

monster400 · Jul 31, 2013, 4:56 PM

yes zyxel modem thats auto load a setup profile from fullrate and going in briged mode act like a modem

kejianshi · Jul 31, 2013, 5:02 PM

OK - Now, I need to know. What is your gateway address/IP?

kejianshi · Jul 31, 2013, 5:42 PM

OK - I'm not sure how you have been trying to route everything here, but I'm pretty sure you want to use Virtual IPs and 1:1 NAT to get your public IPs to each server. To be clear, are the servers all virtual or will some be physical?

monster400 · Jul 31, 2013, 5:32 PM

all servers are vms amt
System: Static Routes
empty

kejianshi · Jul 31, 2013, 5:44 PM

I want you to take a quick look at this.
Now, the first part of this video deals with bridging and static Public IP assignments.
You may have to do something like that but I don't think so. Yours are DHCP assigned.

So, you probably want to go straight to about 2:50 to the part where Virtual IPs are being assigned.

http://www.youtube.com/watch?v=zrBr0N0WrTY

(Sorry - I'm doing about 5 things at once, so earlier I referenced VLAN when I meant VIP.)

monster400 · Jul 31, 2013, 5:44 PM

have seen it before and tryed it

kejianshi · Jul 31, 2013, 6:01 PM

OK - Could you post screenshots of your WAN interface assignment, and VIPs you have set up, firewall rules etc?

The way this should work is your PFsense will get one of your IPs.

The rest of your IPs should be assignable to VIP.

Also want to see that each of the clients to pfsense gets an IP to map public IP to.

monster400 · Jul 31, 2013, 6:08 PM

damm they are too large to upload here do you have a email?

kejianshi · Jul 31, 2013, 6:11 PM

Nope - I'd reduce their size and save as jpg

monster400 · Jul 31, 2013, 6:19 PM

have to do one and one

![Firewall Nat port forward.png](/public/imported_attachments/1/Firewall Nat port forward.png)
![Firewall Nat port forward.png_thumb](/public/imported_attachments/1/Firewall Nat port forward.png_thumb)

monster400 · Jul 31, 2013, 6:20 PM

lan

![firewall rules Lan.png](/public/imported_attachments/1/firewall rules Lan.png)
![firewall rules Lan.png_thumb](/public/imported_attachments/1/firewall rules Lan.png_thumb)