Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Topology Question - Long term frustration

    Scheduled Pinned Locked Moved General pfSense Questions
    3 Posts 2 Posters 772 Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • B
      blainecf
      last edited by

      I have a block of 5 Static IP's from my provider.  I know they all work, because I can set my router as any one of them, and everything works.  No need to set or request any MAC address registration, etc.

      I have the SG-2220 with one port in, and one port out.  I want 1 ip to pass through to my router, and 4 ip's to go to a switch, where they will connect to 4 out-facing computers.

      I want to use the SG-2220 as a hardware firewall, and traffic monitor.  I've configured 4 virtual IP's.  They probably work, but I've been unable to figure out how to get the router to work in series with the SG-2220.

      Seems like I need a switch on the in-facing SG-2220 port, and connect the router and 4 computers to that switch.  The router does not seem to be very happy with that.

      I've been playing with this config on and off for 2 years, and have no satisfying solution.

      Would love some ideas!

      Thanks!

      Mr. Patient

      1 Reply Last reply Reply Quote 0
      • NogBadTheBadN
        NogBadTheBad
        last edited by

        Would creating a DMZ and doing a 1:1 NAT be a better idea.

        Andy

        1 x Netgate SG-4860 - 3 x Linksys LGS308P - 1 x Aruba InstantOn AP22

        1 Reply Last reply Reply Quote 0
        • B
          blainecf
          last edited by

          Thanks for the reply.  My question is more topology related.  Following your lead (which I have been trying similar strategies, and I believe is correct):  So, I would connect the pfSense wan port directly to my ISP provider connection (not a modem, just an ethernet port).  The LAN port of pfSense I would have to connect to a switch, so that I could break out 4 of the ips for outfacing computers, and plug the wan port of the router (for internet on my other computers) into the switch also.

          I've tried that with a layer-2 switch, with less than satisfactory results.  I've ordered a layer-3 switch to try that.

          The other thing I've been trying is a switch right off the ISP (as a DMZ switch), and then plug both the router and pfSense into the DMZ switch.  That doesn't work either, though this also might work with the layer-3 switch.

          Please keep the ideas coming!  Thanks!

          1 Reply Last reply Reply Quote 0
          • First post
            Last post
          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.