Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Transparent bridge with 2 networks

    Scheduled Pinned Locked Moved Firewalling
    3 Posts 2 Posters 1.8k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • T
      tommie
      last edited by

      Hi,

      currently our servers are placed on a network in a datacenter.  We use a transparent bridge to do some firewalling.  This works like a charm.  We don't have an own subnet, but we use a couple of the ip's from our provider.

      Our current network setup is:
      network provider 1.2.3.0/24 - WAN pfsense  LAN - our switch - our servers

      However we want to add a second provider and use two ipadresses on the network interfaces of our server.  However it seems that you can't bridge the LAN interface only to one WAN interface and not to WAN en OPT1.

      What would be a solution to use both networks together, so our servers can have two ipaddresses, one with each network provider?

      1 Reply Last reply Reply Quote 0
      • E
        eri--
        last edited by

        One solution is to not run pfSense in bridge mode but with 1:1 nat for each of the providers to the server. The server will have only one private address with this setup.

        The other option is 1.3 which can do this but its ALPHA so not suitable for production.

        1 Reply Last reply Reply Quote 0
        • T
          tommie
          last edited by

          @ermal:

          One solution is to not run pfSense in bridge mode but with 1:1 nat for each of the providers to the server. The server will have only one private address with this setup.

          The other option is 1.3 which can do this but its ALPHA so not suitable for production.

          okay but the server need to have the public ip of the first provider.  I don't like the 1:1 NAT option as it causes problems with some services.

          Is it possible to create a second LAN connection for the 2e provider and connect this to the same (our internal) switch as the 1ste LAN connection or will this cause problems?  Or do i need to use a secondary networkcard in every server and another VLAN on my switch?

          1 Reply Last reply Reply Quote 0
          • First post
            Last post
          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.