Issue with a block of 16 IPv4 addresses
-
Hello all hope your all well, happy new year to you all
SO, after a little bit of support to try and get my block of 16 IPv4 addresses working.
Now Zen Internet (UK) is now routing their block of 16 IP’s to me like this:
217.13.XX.193
217.13.XX.194
217.13.XX.195
217.13.XX.196
217.13.XX.197
217.13.XX.198
217.13.XX.199
217.13.XX.200
217.13.XX.201
217.13.XX.202
217.13.XX.203
217.13.XX.204
217.13.XX.205
217.13.XX.206
217.13.XX.207 (router/firewall)
217.13.XX.208 (broadcast address)I currently have my Pfsense box managing the PPPOE connection. I need to know what IP to put where in Pfsense to get it working, I’ve tried many different ways and all fail on me.
Any help would be greatly appreciated
-
Hello from another Zen Internet user
Use the others as VIPS and do a 1:1 nat or nat if you dont need a 1:1.
https://www.netgate.com/docs/pfsense/firewall/virtual-ip-address-feature-comparison.html
-
With my previous supplier all I needed to do was to set the PPPOE data and then under services -> DHCP Server set my avalible Range in there. But zen appears to be totally different
-
You have hosts the WAN side of pfSesnse ?
-
I have file servers behind the pfsense box
-
Is 217.13.XX.207 your WAN interface IP ?
If it is you'll need to do a 1:1 nat.
-
The way the servers were configured was the public ip, subnet mask and the public gateway address were directly assigned to the nic card on the servers
-
@nogbadthebad I have tried that server still now resolving
-
It looks to me like they're just giving you a block of addresses and expect you to use them as is. This means you need a pass through firewall that does not do routing and especially not NAT. If you were to connect all those servers, through a switch, to the ISP, I bet they'd work. You could certainly do that, but you'd want to make sure the firewall on each server is configured correctly. Perhaps you could set up pfSense as a bridge between the WAN and LAN interfaces and set up the appropriate rules.
-
@landman16 said in Issue with a block of 16 IPv4 addresses:
217.13.XX.207 (router/firewall)
Im with jknott, If they told you that was the router - then that block is not "routed" to you.. But they just attached them to your connection.
They would not tell you what the router is if they actually routed that .192/28 to you.. Since it would just be routed to your current IP. And then yeah you could put the /28 behind pfsense without any nat.
-
Zen are not even able to tell me how they are routing the IPs to me. This is half the battle if they could I wouldn’t be where I am now
-
@nogbadthebad said in Issue with a block of 16 IPv4 addresses:
Is 217.13.XX.207 your WAN interface IP ?
We'd know exactly how to help if you answered the question I posted.
Is 217.13.XX.207 your WAN interface IP ?
"I have tried that server still now resolving" doesn't really mean a thing.
-
@landman16 said in Issue with a block of 16 IPv4 addresses:
Zen are not even able to tell me how they are routing the IPs to me. This is half the battle if they could I wouldn’t be where I am now
Sorry but I find that very hard to believe, they are one of the better ISPs in the UK.
-
@nogbadthebad yes that is the WAN address
-
OK then you need to nat those addresses, but not 217.13.XX.207
217.13.XX.192/28 can't exist on your WAN and LAN interface.
-
If .207 is your WAN, then that /28 is not "routed" to you... Your just attached to that network, yeah your going to have to NAT to use them as vips.
Have them ROUTE the /28 to you if you want to put it behind pfsense.
-
How would I go about doing that ?
-
Doing what? Routed call your ISP and tell them to route that /28 you via transit network..
1:1 nat just create those IPs as vips and do 1:1 nat..
https://www.netgate.com/docs/pfsense/book/nat/1-1-nat.html -
https://www.netgate.com/resources/videos/nat-on-pfsense-23.html
-
@landman16 said in Issue with a block of 16 IPv4 addresses:
Zen are not even able to tell me how they are routing the IPs to me. This is half the battle if they could I wouldn’t be where I am now
If they're just giving you a block of addresses, then use them that way. No need to route them. As I mentioned above, you just need a bridge/firewall, to pass the addresses to the servers. Take a computer, configure it with a static address from that list. If it works, that's all you need to do for each server. Also, if those servers run Linux, they will already have a good firewall built in. Just configure and you wouldn't even need pfSense, though an extra layer of protection is better.