<![CDATA[Bridge public IPblock to interface and keep second IPblock with traditional NAT]]>I am in a situation where I need to scrap off bandwidth before I hand it over to my corporate routers.  As stupid as it sounds, Corporate only wants a 20Mbs connection.  I can only get a 60Mbs connection in my area. I was given two ip blocks from the ISP.  Problem being that they only provide one Ethernet connection for both blocks.  I want to hand off one block to corporate on one interface and limit it to the 20Mbs and use the remaining bandwidth for my own internal network on a standard LAN interface. 
I am looking for some help regarding this setup

PFSense 2.3.4

Statics given to me from ISP
Network 1: 208.43.15.136 /29
Usable IPs: 208.43.15.138 - 142
Subnet Mask: 255.255.255.248
Gateway: 208.43.15.137

Network 2: 109.43.15.184 /29
Usable IPs: 109.43.15.186 - 190
Subnet Mask: 255.255.255.248
Gateway: 109.43.15.185

Connect from ISP switch
interface FastEthernet0/1
interface Vlan10
ip address 109.43.15.185 255.255.255.248
ip address 208.43.15.137 255.255.255.248

The setup I am trying to accomplish:
WAN <network1>DMZ
WAN <nat network2="">LAN

Systems in the DMZ should be using public IPs as static from network1

I believe that I should use a bridge for network1 but not sure how to still access the public IPs of network2 for my personal LAN</nat></network1>

]]>https://forum.netgate.com/topic/115428/bridge-public-ipblock-to-interface-and-keep-second-ipblock-with-traditional-natRSS for NodeThu, 08 Oct 2026 07:08:06 GMTTue, 09 May 2017 21:17:28 GMT60