Navigation

    Netgate Discussion Forum
    • Register
    • Login
    • Search
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search

    Topology Question - Long term frustration

    General pfSense Questions
    2
    3
    505
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • B
      blainecf last edited by

      I have a block of 5 Static IP's from my provider.  I know they all work, because I can set my router as any one of them, and everything works.  No need to set or request any MAC address registration, etc.

      I have the SG-2220 with one port in, and one port out.  I want 1 ip to pass through to my router, and 4 ip's to go to a switch, where they will connect to 4 out-facing computers.

      I want to use the SG-2220 as a hardware firewall, and traffic monitor.  I've configured 4 virtual IP's.  They probably work, but I've been unable to figure out how to get the router to work in series with the SG-2220.

      Seems like I need a switch on the in-facing SG-2220 port, and connect the router and 4 computers to that switch.  The router does not seem to be very happy with that.

      I've been playing with this config on and off for 2 years, and have no satisfying solution.

      Would love some ideas!

      Thanks!

      Mr. Patient

      1 Reply Last reply Reply Quote 0
      • NogBadTheBad
        NogBadTheBad Galactic Empire last edited by

        Would creating a DMZ and doing a 1:1 NAT be a better idea.

        1 Reply Last reply Reply Quote 0
        • B
          blainecf last edited by

          Thanks for the reply.  My question is more topology related.  Following your lead (which I have been trying similar strategies, and I believe is correct):  So, I would connect the pfSense wan port directly to my ISP provider connection (not a modem, just an ethernet port).  The LAN port of pfSense I would have to connect to a switch, so that I could break out 4 of the ips for outfacing computers, and plug the wan port of the router (for internet on my other computers) into the switch also.

          I've tried that with a layer-2 switch, with less than satisfactory results.  I've ordered a layer-3 switch to try that.

          The other thing I've been trying is a switch right off the ISP (as a DMZ switch), and then plug both the router and pfSense into the DMZ switch.  That doesn't work either, though this also might work with the layer-3 switch.

          Please keep the ideas coming!  Thanks!

          1 Reply Last reply Reply Quote 0
          • First post
            Last post

          Products

          • Platform Overview
          • TNSR
          • pfSense Plus
          • Appliances

          Services

          • Training
          • Professional Services

          Support

          • Subscription Plans
          • Contact Support
          • Product Lifecycle
          • Documentation

          News

          • Media Coverage
          • Press
          • Events

          Resources

          • Blog
          • FAQ
          • Find a Partner
          • Resource Library
          • Security Information

          Company

          • About Us
          • Careers
          • Partners
          • Contact Us
          • Legal
          Our Mission

          We provide leading-edge network security at a fair price - regardless of organizational size or network sophistication. We believe that an open-source security model offers disruptive pricing along with the agility required to quickly address emerging threats.

          Subscribe to our Newsletter

          Product information, software announcements, and special offers. See our newsletter archive to sign up for future newsletters and to read past announcements.

          © 2021 Rubicon Communications, LLC | Privacy Policy