I want to use multiple IP on WAN and NAT for LAN, and it seems to be difficult for me.

My Upstream-Provider gives me
xxx.xxx.xxx.216/29

I use
xxx.xxx.xxx.217 as Gateway
xxx.xxx.xxx.218 for WAN-NIC
xxx.xxx.xxx.219 … as Virtual IP

I created 1:1 NATs, rules for some ports/IP on LAN.
Now I can reach and configure the pfsense from outside, but no one of the other IP and (of course) no device on LAN-side, which I configured as VIP. Even I cannot ping them.

The configuration is the same I use for another project, where I got a transfer net for WAN and my provider does routing a complete C-Net on this transfer net. In this case all works fine. So where is my mistake?

Thanks for all hints.

Freddy