Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Adding (moving) another block of addresses to WAN

    Scheduled Pinned Locked Moved HA/CARP/VIPs
    5 Posts 3 Posters 3.1k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • N
      nexusone
      last edited by

      I have 2 different blocks of ip addresses that are presently being handled by 2 different pfsense machines. I'd like to merge this down to one pfs system to simplify management. To minimize the impact of this change I'm asking the questions first instead of just figuring it out.

      2 PFS systems.

      PFS1 and PFS2

      I want to move the public ip's from PFS2 -> PFS1 while leaving the existing address space on PFS1 as-is.

      How/where do I add the additional IP space to the WAN interface? I dont see a way to add additional networks to the WAN nic, so I assume that I have to add each of the addresses in the other block as virtual addresses. Is this correct?

      When addresses are successfully configured on the surviving pfs system, is there a way I can send a broadcast message from the system being removed to alert the upstream routers of the change so that I dont need to wait until the expires? I'd like to accelerate that as much as possible as I've encountered delays in restoring service as a result of similar situations in the past.

      Thanks.

      1 Reply Last reply Reply Quote 0
      • N
        nexusone
        last edited by

        anyone?

        can i just add VIPs from another ip space to my main wan interface?

        1 Reply Last reply Reply Quote 0
        • dotdashD
          dotdash
          last edited by

          If you are using Proxy-ARP VIPs, you can just add the VIPs in. As for the arp cache on the upstream devices, you'll need to wait, power cycle the upstream router, or get the provider to flush the arp cache on the router.

          1 Reply Last reply Reply Quote 0
          • N
            nexusone
            last edited by

            Dealing with the upstream provider is just always a pain in the butt. In a pinch I just went ahead and added the VIPs and it worked out just fine.

            1 Reply Last reply Reply Quote 0
            • W
              WarrickF
              last edited by

              Which version are you using. I've been trying to do the same thing and I can't get thenew PARP addresses + NAT to work ?

              1 Reply Last reply Reply Quote 0
              • First post
                Last post
              Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.