Add second ip v4 rnage to LAN port
-
Is it possible to add a second ip address range to the LAN port so I can reach those addresses via it?
So I have 192.168.0.0/24 assigned and I want to add 172.16.0.0/24 to it.
-
It's possible to do that by creating an alias address. It can be done in FreeBSD by using the ifconfig command, so you'd have to check the man pages. They show how to create an alias. However, I don't know how well pfSense will work with an alias address.
-
I know it can be done in FreeBSD, yes, but how pfSense will respond to it is the question. I was hoping someone who has tried /done this could share some insights?
-
pfSense has a “virtual IP” option on the firewall menu that sounds like it works similar. Select IP Alias, then choose the interface, address type (v4 or v6), then enter the address and subnet mask.
The S in IOT stands for Security
-
Just one question before you go down this route.
How does pfSense handle DHCP requests with a secondary subnet added to an interface ?
-
@nogbadthebad I don't used DHCP, all my servers have static ip addresses. I do bind the ip addresses to the mac addresses as well, so no rogue ip / mac addresses can operate on the network.
-
@virgiliomi said in Add second ip v4 rnage to LAN port:
pfSense has a “virtual IP” option on the firewall menu that sounds like it works similar. Select IP Alias, then choose the interface, address type (v4 or v6), then enter the address and subnet mask.
I actually used virtual ip's a lot, but I never considered that I could assign a virtual ip to the LAN port as well. Thanks, this may just be the solution I'm looking for.
-
Someone here pointed out to me that one can add an "IP Alias" under virtual ip's, which does exactly what I want.
