1 Wan - 1 Lan - 6 subnets

dcaba79

I have a hosted server with various virtual machines. currently there is no firewall setup just the basic windows firewall . each vm has its own dedicated public ip and they communicate with each other via the private network within these subnets as the hosting company lets it be done. I'm tring a pfsense box with 1 public wan and 1 lan which will firewall all incoming traffic i will be canceling all other public ip's tie in all the subnets and let each server talk to each other . have the pfsense box route the incoming traffic from wan side to lan to there private ip's

have wan
10.0.0.1

server1 behind 192.168.38.130/26 location 1 given by hosting company
server2 behind 192.168.222.132/26 location 2 given by hosting company

vm server 1 network 10.0.61.193/26 location 1 given by hosting company these are portable ips only work on that data center .
vm server 2 network 10.0.170.193/27 location 2 given by hosting company these are portable ips only work on that data center
but within a windows enviroment all machines communicate with each other

service network 192.168.0.1/24 ip generated by pfsense

I have setup the mutli net 1 lan i'm able to access internet where the pfsense vm is located with the pfsense generate net and the corresponding vm host subnet.

tim.mcmanus

You should be able to do this with pfSense but be aware that if two servers are using the same public IP address and same port, that will create a problem.

For example, if Server1 and Server2 are web servers, you cannot host both web servers using the same IP address because pfSense will not know which server to route the request to. If you map port 80 to both servers behind the firewall, when pfSense hits the first port 80 forwarding rule, traffic will go to that server.

So just be aware that collapsing public IP addresses into one single address may cause issues if servers behind pfSense are using or expecting data from the same incoming ports.