Assign ip block

Pydevx

Hi..
How can i assign an ip block for a client or another pf like an isp
anybody help me ?
i want assign some ip's to a pfsense (i guess a mac adress) and use ips like i was take it an ips on other pfsense (virtual ips)
how can i do it ?

johnpoz

That would be done via a dhcp reservation, or static dhcp..
https://doc.pfsense.org/index.php/DHCP_Server

==Static IP Mappings==
Static IP mappings can be added at the bottom of the DHCP server tab for a given interface.

To add a Static IP mapping, click the +, and then enter a MAC address, IP address, Hostname, and Description. These mappings can also be created from the DHCP Leases view. There are many other per-host options which can be sent as well.

But you say "block".. So you want to give a downstream device/client say a 192.168.99/24 behind their router? Without any natting going on..

Then you would connect to them with a transit network, and route the networks you assign to them to them via the transit.

Or are you talking about delegation of a ipv6 prefix?

Pydevx

The real topology : we have metro net and isp (ttnet) is assign /29 block (6 pieces) for us on the 1 line
and we distribute them (ips) some host in our inetnal network (ipv4) (we use sonicwall fw now but i want to change this pfsense )

i want simulate this topology on virtual machines,
i setup two vmachines and both pfsense
one is simulate our firewall (this no problem it is ok)
second is simulate isp (ttnet) but i cant assign ip block (group) to my firewall simulater host , i dont know how can i :) Thanx

johnpoz

You have a /29 given to you and you want to assign one of these public IP behind pfsense? That is not possible without bridging. But you could assign all of the /29 to your pfsense wan via VIPs and then use 1:1 natting to the rfc1918 behind.. Just make sure you assign a specific rfc1918 address via the dhcp reservations to the machines behind or statically and then create your 1:1 nats. And then either allow inbound to them and let them firewall or firewall the specific ports you want to allow unsolicited to their ips.

Pydevx

no.. i don't want assign a public ip behind the pfsense .
i want simulate isp's reaction how i assign an ip block over a line with a pfsense (isp simulator). there is end of this line my pfsense fw simulater (and then it is going to use 1:1 nat - this part is not problem , i will handle)
the problem is how can i simulate isp's reaction (assign an ip block to my customer :) )