Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Public IP to Client

    Scheduled Pinned Locked Moved HA/CARP/VIPs
    16 Posts 5 Posters 1.5k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • P
      ProblemMaker
      last edited by

      Hello,

      I am new in pfsense i need help please expert help me out

      i have different public ip pools from my ISP in WAN side and now i have three Server in LAN side and now i want to give public ip to all those server so how can i do this? please someone help me out

      i have 4 pools x.x.x.x/29 public ip and all are routed to me

      1 Reply Last reply Reply Quote 0
      • bepoB
        bepo
        last edited by

        Hello,

        you can create Alias IPs on your WAN Interface and then 1:1 NAT them to the internal servers.

        Kind reagards

        Please use the thumbs up button if you received a helpful advice. Thank you!

        1 Reply Last reply Reply Quote 0
        • P
          ProblemMaker
          last edited by

          for this i have to use private ip in internal server and then NAT 1:1 .. but actually i directly want to give public ip to internal server tht will be routed through pfsense

          1 Reply Last reply Reply Quote 0
          • johnpozJ
            johnpoz LAYER 8 Global Moderator
            last edited by

            Well if the netblocks are actually routed to you.. Then just create the routed netblocks and networks behind pfsense, and then all you have to do is all the traffic in the firewall

            So take one of those /29 or all 4 of them and put them on networks on the lan side of pfsense.

            So for example change pfsense lan interface to x.x.x.1/29 and then your clients on this network could be .2 - .6

            Or create a new optX network where this /29 will be connected behind pfsense.

            An intelligent man is sometimes forced to be drunk to spend time with his fools
            If you get confused: Listen to the Music Play
            Please don't Chat/PM me for help, unless mod related
            SG-4860 24.11 | Lab VMs 2.8, 24.11

            P 1 Reply Last reply Reply Quote 0
            • jahonixJ
              jahonix
              last edited by

              https://www.netgate.com/docs/pfsense/firewall/virtual-ip-address-feature-comparison.html

              1 Reply Last reply Reply Quote 0
              • P
                ProblemMaker @johnpoz
                last edited by

                @johnpoz said in Public IP to Client:

                optX netwo

                when i try to put my public ip on lan interface i got this error

                "A valid interface to track must be selected."
                "This IPv4 address is the network address and cannot be used"

                1 Reply Last reply Reply Quote 0
                • DerelictD
                  Derelict LAYER 8 Netgate
                  last edited by

                  So what are you entering as the interface address and netmask?

                  Chattanooga, Tennessee, USA
                  A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                  DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                  Do Not Chat For Help! NO_WAN_EGRESS(TM)

                  P 1 Reply Last reply Reply Quote 0
                  • P
                    ProblemMaker @Derelict
                    last edited by

                    @derelict said in Public IP to Client:

                    So what are you entering as the interface address and netmask?

                    public ip and the subnet mask 29 for example x.x.x.x/29

                    1 Reply Last reply Reply Quote 0
                    • DerelictD
                      Derelict LAYER 8 Netgate
                      last edited by Derelict

                      Ah. When you set that set IPv6 to none.

                      If you still get an error you are at least going to have to give us the last octet of the address there.

                      Chattanooga, Tennessee, USA
                      A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                      DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                      Do Not Chat For Help! NO_WAN_EGRESS(TM)

                      P 1 Reply Last reply Reply Quote 0
                      • P
                        ProblemMaker @Derelict
                        last edited by

                        @derelict said in Public IP to Client:

                        Ah. When you set that set IPv6 to none.

                        If you still get an error you are at least going to have to give us the last octet of the address there.

                        this error comes now

                        IPv4 address 167.114.2x.232/29 is being used by or overlaps with: WAN (167.114.21x.84/1)
                        This IPv4 address is the network address and cannot be used

                        jahonixJ 1 Reply Last reply Reply Quote 0
                        • DerelictD
                          Derelict LAYER 8 Netgate
                          last edited by

                          @problemmaker said in Public IP to Client:

                          167.114.21x.84/1

                          So you have to find where that is configured.

                          Diagnostics > Routes might show you. That /1 netmask might appear as 128.0.0.0.

                          Chattanooga, Tennessee, USA
                          A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                          DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                          Do Not Chat For Help! NO_WAN_EGRESS(TM)

                          P 1 Reply Last reply Reply Quote 0
                          • P
                            ProblemMaker @Derelict
                            last edited by

                            @derelict said in Public IP to Client:

                            @problemmaker said in Public IP to Client:

                            167.114.21x.84/1

                            So you have to find where that is configured.

                            Diagnostics > Routes might show you. That /1 netmask might appear as 128.0.0.0.

                            actually if i dnt use /1 netmask in wan side my wan ip does not response .. because my provider give me 255.255.255.255 mask and gateway is other subnet .

                            1 Reply Last reply Reply Quote 0
                            • DerelictD
                              Derelict LAYER 8 Netgate
                              last edited by

                              Not sure what to tell you there. That is unlike any ISP shenanigans I have seen before.

                              Maybe someone else knows.

                              Chattanooga, Tennessee, USA
                              A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                              DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                              Do Not Chat For Help! NO_WAN_EGRESS(TM)

                              P 1 Reply Last reply Reply Quote 0
                              • P
                                ProblemMaker @Derelict
                                last edited by

                                @derelict said in Public IP to Client:

                                Not sure what to tell you there. That is unlike any ISP shenanigans I have seen before.

                                Maybe someone else knows.

                                it is an OVH
                                https://docs.ovh.com/gb/en/cloud/dedicated/network-bridging/
                                https://docs.ovh.com/gb/en/cloud/dedicated/network-ipaliasing/

                                1 Reply Last reply Reply Quote 0
                                • jahonixJ
                                  jahonix @ProblemMaker
                                  last edited by

                                  @problemmaker What settings does your ISP propose? Ask them to come up with a decent solution (starting with your gateway).

                                  Don't try to hack something together that might seem to work now. It will byte you in the long run.

                                  BTW, you usually get a /32 mask with PPP links.
                                  I have something like
                                  111.2.3.4 /32 GW 111.9.8.7
                                  on my WAN, and always had. Revert to that first and see why it doesn't work in your scenario. Once you figured that out the rest should be easy.

                                  1 Reply Last reply Reply Quote 0
                                  • DerelictD
                                    Derelict LAYER 8 Netgate
                                    last edited by Derelict

                                    Forget it, Jake. It's OVH.

                                    Chattanooga, Tennessee, USA
                                    A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                                    DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                                    Do Not Chat For Help! NO_WAN_EGRESS(TM)

                                    1 Reply Last reply Reply Quote 0
                                    • First post
                                      Last post
                                    Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.