5 WANS to a single Lan with some http/https servers on

kejianshi · Jul 31, 2013, 4:40 PM

Whats ISP are you using?

monster400 · Jul 31, 2013, 4:42 PM

https://www.fullrate.dk/ denmark

monster400 · Jul 31, 2013, 4:45 PM

i have locked these
31/07-2013 15:49:58 00:0c:29:cf:01:94 to 95.166.xxx.xxx
30/07-2013 15:50:35 00:0c:29:cf:01:b2 to 95.166.xxx.xxx
30/07-2013 15:49:12 00:0c:29:cf:01:a8 to 95.166.xxx.xxx
30/07-2013 15:49:11 00:0c:29:cf:01:9e to 95.166.xxx.xxx
30/07-2013 14:50:25 00:0c:29:cf:01:80 to 95.166.xxx.xxx

kejianshi · Jul 31, 2013, 4:53 PM

OK - I checked your ISP. Its Danish.
I see that they do give up to 5 IPs and its done via DHCP. So, thats correct.
Are you using the zyxel modem? If so, is it only acting as modem or is it also routing, DHCP, etc?

monster400 · Jul 31, 2013, 4:56 PM

yes zyxel modem thats auto load a setup profile from fullrate and going in briged mode act like a modem

kejianshi · Jul 31, 2013, 5:02 PM

OK - Now, I need to know. What is your gateway address/IP?

kejianshi · Jul 31, 2013, 5:42 PM

OK - I'm not sure how you have been trying to route everything here, but I'm pretty sure you want to use Virtual IPs and 1:1 NAT to get your public IPs to each server. To be clear, are the servers all virtual or will some be physical?

monster400 · Jul 31, 2013, 5:32 PM

all servers are vms amt
System: Static Routes
empty

kejianshi · Jul 31, 2013, 5:44 PM

I want you to take a quick look at this.
Now, the first part of this video deals with bridging and static Public IP assignments.
You may have to do something like that but I don't think so. Yours are DHCP assigned.

So, you probably want to go straight to about 2:50 to the part where Virtual IPs are being assigned.

http://www.youtube.com/watch?v=zrBr0N0WrTY

(Sorry - I'm doing about 5 things at once, so earlier I referenced VLAN when I meant VIP.)

monster400 · Jul 31, 2013, 5:44 PM

have seen it before and tryed it

kejianshi · Jul 31, 2013, 6:01 PM

OK - Could you post screenshots of your WAN interface assignment, and VIPs you have set up, firewall rules etc?

The way this should work is your PFsense will get one of your IPs.

The rest of your IPs should be assignable to VIP.

Also want to see that each of the clients to pfsense gets an IP to map public IP to.

monster400 · Jul 31, 2013, 6:08 PM

damm they are too large to upload here do you have a email?

kejianshi · Jul 31, 2013, 6:11 PM

Nope - I'd reduce their size and save as jpg

monster400 · Jul 31, 2013, 6:19 PM

have to do one and one

![Firewall Nat port forward.png](/public/imported_attachments/1/Firewall Nat port forward.png)
![Firewall Nat port forward.png_thumb](/public/imported_attachments/1/Firewall Nat port forward.png_thumb)

monster400 · Jul 31, 2013, 6:20 PM

lan

![firewall rules Lan.png](/public/imported_attachments/1/firewall rules Lan.png)
![firewall rules Lan.png_thumb](/public/imported_attachments/1/firewall rules Lan.png_thumb)

monster400 · Jul 31, 2013, 6:20 PM

wan

![firewall rules Wan.png](/public/imported_attachments/1/firewall rules Wan.png)
![firewall rules Wan.png_thumb](/public/imported_attachments/1/firewall rules Wan.png_thumb)

monster400 · Jul 31, 2013, 6:21 PM

wan2

![firewall rules Wan2.png](/public/imported_attachments/1/firewall rules Wan2.png)
![firewall rules Wan2.png_thumb](/public/imported_attachments/1/firewall rules Wan2.png_thumb)

monster400 · Jul 31, 2013, 6:21 PM

wan3

![firewall rules Wan3.png](/public/imported_attachments/1/firewall rules Wan3.png)
![firewall rules Wan3.png_thumb](/public/imported_attachments/1/firewall rules Wan3.png_thumb)

monster400 · Jul 31, 2013, 6:22 PM

wan4

![firewall rules Wan4.png](/public/imported_attachments/1/firewall rules Wan4.png)
![firewall rules Wan4.png_thumb](/public/imported_attachments/1/firewall rules Wan4.png_thumb)

monster400 · Jul 31, 2013, 6:23 PM

wan5

![firewall rules Wan5.png](/public/imported_attachments/1/firewall rules Wan5.png)
![firewall rules Wan5.png_thumb](/public/imported_attachments/1/firewall rules Wan5.png_thumb)