Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    1 LAN NIC, static ip AND VIP for LAN subnets

    Scheduled Pinned Locked Moved HA/CARP/VIPs
    2 Posts 1 Posters 910 Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • W
      wm408
      last edited by

      Hi,

      I've assigned a VIP (IP Alias) to a physical LAN Nic to handle requests for a different subnet, other than the LAN subnet.
      I.e: LAN subnet = 192.168.10.1/24
      IP Alias subnet  = 192.168.11.1/24.

      Under Advanced > Firewall / NAT, the setting to bypass firewall rules for traffic on the same interface is checked.

      It appears that I have all of the firewalls rules set on the LAN interface for the two separate subnets to allow traffic to/from one another, etc.  So no restrictions.

      Still, there's some firewall blocking going on for some traffic and pings that originate from the 192.168.11.0/24 subnet to the IP Alias  192.168.11.1.  Also - cannot ping an external host using 192.168.11.1 as a gateway.  NAT is configured properly for the 192.168.11.0/24 to the WAN, just like the 192.168.10.0/24 subnet was auto generated.  Same kind of rule.

      First time working with IP Aliases in this scenario. 
      Is it possible to have an IP Alias (192.168.11.1) to be used as a default gateway for 192.168.11.0/24 hosts on the same interface as the physical interface (192.168.10.1 and subnet 192.168.10.0/24)?

      Let me know if any thoughts/tips.

      Thanks.

      1 Reply Last reply Reply Quote 0
      • W
        wm408
        last edited by

        Simply ended up using VLANs for this situation.  Previously had been told that the switch did not support VLANs, found out otherwise.

        Further… configured VLANs on pfSense under: Interfaces > Assign > VLANs and Interface Assignments.

        1 Reply Last reply Reply Quote 0
        • First post
          Last post
        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.