Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Setup secondary IP's for WAN interface

    Scheduled Pinned Locked Moved Routing and Multi WAN
    6 Posts 2 Posters 1.1k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • S
      stevetingate
      last edited by

      Hi

      I have one WAN link into my pfsense box, and have just ordered 2 more ip's from them

      this is what they sent me
      Network ID : 115.70.180.140
      Broadcast : 115.70.180.143 
      Useable IPs : 115.70.180.141 - 115.70.180.142 Subnet Mask : 255.255.255.252

      i have added the two ip's under virtual IP's

      115.70.180.141 - 115.70.180.142  as /30

      how do i go about setting up a firewall rule to allow port 80 for example from that one public ip ?

      1 Reply Last reply Reply Quote 0
      • V
        viragomann
        last edited by

        You must add each of them as IP Alias.

        After that you can select them from the destination drop-town when you add port forwarding rule.

        In firewall rules you have to use internal addresses in the destination field.

        1 Reply Last reply Reply Quote 0
        • S
          stevetingate
          last edited by

          thanks for the info

          do i leave the virtual ip's in

          and aloso added the alias's

          where do i specify this alias under the nat rules ?

          1 Reply Last reply Reply Quote 0
          • V
            viragomann
            last edited by

            The IPs should only be add as type "IP Alias" to the WAN interface.

            Clients in the Internet will use these IPs to establish connection to your services. So in the NAT rule, when WAN interface is selected, you can choose the VIPs from the drop-town at destination instead of the WAN address.

            1 Reply Last reply Reply Quote 0
            • S
              stevetingate
              last edited by

              Thanks

              So i have added the additional IP's as Alias's

              now in the NAT rules where do i reflect this ?

              ip1.PNG
              ip1.PNG_thumb
              ip2.PNG
              ip2.PNG_thumb

              1 Reply Last reply Reply Quote 0
              • V
                viragomann
                last edited by

                No man, not that Alias! That sets only an alias name for one or multiple IPs, but doesn't assign the IP to the interface.

                Go to Firewall > Virtual IPs.Here you can add virtual IPs to interfaces.
                Select type "IP Alias", select the WAN interface and enter one of your additional public IPs and the mask and save it. Add the second one in the same way.

                1 Reply Last reply Reply Quote 0
                • First post
                  Last post
                Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.