Using /29 - virtual ip's or wan vlan?

[robertfranz]

I've done nat fwd rules, and I've used a wan vlan to spit a /29 between 3 different vendor routers - but I've never set it up in pf using virtual ip's.

(well, once using non routable internal for a ha mockup)

Is there any particular advantage using vip's - particularly over vlanning it?

The use case I have in mind at the moment is exposing dns and/or a proxy for road warriors.

[Derelict]

You really cannot make an inside interface wwith public addresses with a single /29 on WAN. The best you can do is 1:1 NAT addresses to inside hosts. Some people bridge WAN so they can put hosts on public IP addresses. Not a fan.

If they were to route another subnet to an address on that /29 you could use that subnet on an inside interface, use VIPs on WAN, or basically do whatever you want.