Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Multiple VirtualIP and only 1 gateway

    HA/CARP/VIPs
    3
    8
    3.0k
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • V
      vidas
      last edited by

      Hello,

      I have 4 ip available, and all usable, and I would like to configure pfsense so you can use them all as IP Virtual.
      The problem that I can not get over is that all these ip have the same gateway, also these ip do not work if they are not associated with a MAC address.

      I first thought to configure four network adapters on VMware that had to be configured with 4 mac address, plus a fifth that was to connect the LAN.

      For as I said earlier pfsense not let me configure the same WAN gateway on more revenue.

      How can I do?

      2.3.1-RELEASE-p1

      Thank you

      1 Reply Last reply Reply Quote 0
      • C
        cmb
        last edited by

        You just add virtual IPs on your WAN, not additional interfaces.

        1 Reply Last reply Reply Quote 0
        • V
          vidas
          last edited by

          Not working!

          I applied a rule to test if I can reach via ICMP, but it does not work.

          I am follow this tipic for to be sure …. https://forum.pfsense.org/index.php?topic=111899

          1 Reply Last reply Reply Quote 0
          • C
            cmb
            last edited by

            Are you saying they all have to be associated with a unique MAC address? Usually not the case, but if it is, CARP will address that (though make sure your ESX is configured appropriately to allow multiple MACs to the port, in promiscuous on that port group).

            Guessing it's more likely you've polluted your upstream ARP cache messing around with multiple NICs. That's the likely cause if it's cable, power cycle your modem, then the VIPs will likely work.

            1 Reply Last reply Reply Quote 0
            • V
              vidas
              last edited by

              No, one VIPs is associated with one mac address. I think this is the problem. In addition to the question of the gateway

              1 Reply Last reply Reply Quote 0
              • C
                cmb
                last edited by

                You only have one gateway, you don't add one gateway multiple times. Use one WAN NIC. Delete the other WAN NICs you added, add IP alias type VIPs on WAN, power cycle your modem, and they'll probably work fine unless your ISP has an atypical setup.

                1 Reply Last reply Reply Quote 0
                • V
                  vidas
                  last edited by

                  It's OVH datacenter! I will try in a few hours

                  EDIT: Not work again

                  1 Reply Last reply Reply Quote 0
                  • J
                    JorgeOliveira
                    last edited by

                    Hello,

                    I'd recommend the following setup:

                    • Virtual Network Adapter with a vMAC connected to pfSense WAN

                    • Set in OVH Control Panel the same vMAC for the 4 IPs

                    • Assuming the block purchased was 198.51.100.4/30 (198.51.100.4 - 198.51.100.7), you'd configure pfSense WAN statically with the following settings:
                      IP: 198.51.100.4
                      Mask bits: 32 (equivalent to 255.255.255.255)
                      Gateway: Not set

                    • Configure LAN as suits your better, example:
                      IP: 10.10.10.1
                      Mask bits: 24 (equivalent to 255.255.255.0)
                      Gateway: Not set

                    • Then add a gateway manually for the WAN (If your dedicated server is at 203.0.113.X, you'd use 203.0.113.254 as the gateway) and set the advanced option "Use non-local gateway through interface specific route" to allow gateway outside subnet.

                    • Add the virtual IPs to your WAN: 198.51.100.5/32, 198.51.100.6/32, 198.51.100.7/32

                    In the past this used to be much more complicated (I've followed those tuts to a certain extent on earlier pfSense versions):
                    http://blog.magiksys.net/pfsense-firewall-default-gateway-different-subnet
                    http://magiksys.blogspot.pt/2012/12/pfsense-bridge-gateway-vmware-ovh-ip.html

                    Regards,
                    Jorge M. Oliveira

                    My views have absolutely no warranty express or implied. Always do your own research.

                    1 Reply Last reply Reply Quote 0
                    • First post
                      Last post
                    Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.