Navigation

    Netgate Discussion Forum
    • Register
    • Login
    • Search
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search

    Pfsense Multiple static IPs each with its own WAN

    Routing and Multi WAN
    3
    7
    372
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • G
      Grimlock last edited by

      Here is my situation:

      I have 5 static IP addresses.
      x.x.x.113 -> gateway
      x.x.x.114 -> address 1
      x.x.x.115 -> address 2
      x.x.x.116 -> address 3
      x.x.x.117 -> address 4
      x.x.x.118 -> address 5

      I  have a Netgate XG-7100 Pfsense box. I went through the initial set up of Netgate box and it is up and running. I gave the Netgate the address x.x.x.114 with the gateway x.x.x.113.  I am looking to setup multiple WAN's on the Netgate box for addresses 2, 3, and 4 with all of them using the same gateway. I have one modem that i will run to the Netgate. Currently I have the modem plugged into ETH1 and my computer coming off ETH2.

      Is it possible for me to set ETH3 as a WAN, ETH4 as a LAN, ETH5 WAN, ETH6 LAN, ETH7 WAN, ETH8 LAN?

      The VirttualIP's are IP Aliases each with one of the static IP's.

      The NAT 1:1 for each with their subnets x.x.10.x, x.x.20.x, etc

      The outbound rule to "Manual Outbound NAT rule generation. (AON - Advanced Outbound NAT)"

      at this point i am lost. I know i should configure the Interface assignment but I get "address overlaps with the x.x.x.114" error

      Can someone point me in the right direction? and or shed some light on what i am missing?

      Thank you in advance!

      1 Reply Last reply Reply Quote 0
      • V
        viragomann last edited by

        That makes no sense for me and it is not possible to set it up that way.

        Don't no, what you try to achieve with that.

        Your WAN addresses are within a common subnet. If you assign multiple addresses of a subnet to different interfaces, the routing won't work.
        If you configure the interfaces as /32 you cannot add the gateway.
        ???

        1 Reply Last reply Reply Quote 0
        • G
          Grimlock last edited by

          What doesn't make sense?
          I want to configure the box with all 5 static IP's each having their own subnet and all using the same gateway.
          I want my:
          Phones
          Production
          L.I. Honeypot
          Lab
          Development

          all to have their own static IP's

          1 Reply Last reply Reply Quote 0
          • V
            viragomann last edited by

            @Grimlock:

            What doesn't make sense?

            Assigning the IPs of a single subnet to different NICs on a single device.

            @Grimlock:

            I want to configure the box with all 5 static IP's each having their own subnet and all using the same gateway.
            I want my:
            Phones
            Production
            L.I. Honeypot
            Lab
            Development

            all to have their own static IP's

            Yes, that's doable tough.
            Assign one of the public IPs to the WAN interface and the others as IP Aliases to WAN.
            Use 1:1 NAT to set the incoming and outgoing NAT translations and you're fine.

            1 Reply Last reply Reply Quote 0
            • G
              Grimlock last edited by

              Not sure how you got that I wanted to assign a single subnet to different IP's?

              In any event, I had done what you said already by creating the IP aliases and configured the 1:1 NAT.

              I am a little confused as to how this works?
              If ETH1 is my WAN and ETH2 - ETH8 are my LANs then if i connect ETH3, ETH4 to one switch and have each line to a separate VLAN
              How does each know the static IP I want to use?

              I am sorry if I sound dumb or am not phrasing what I want to do correctly. I do appreciate the help!!

              1 Reply Last reply Reply Quote 0
              • V
                viragomann last edited by

                Obviously I misunderstood. Maybe a drawing of your network or what you try to achieve could bring some light into this.

                1 Reply Last reply Reply Quote 0
                • Derelict
                  Derelict LAYER 8 Netgate last edited by

                  You probably want to look at this:

                  https://www.netgate.com/docs/pfsense/solutions/xg-7100/switch-overview.html

                  In particular, you want to take some of the ports off of VLAN 4091 (LAN) and put them on separate VLANs tagged through the uplinks to newly-assigned pfSense VLAN interfaces.

                  You likely don't want 1:1 NAT because you can only 1:1 NAT one address to one other (hence why it is called 1:1).

                  What you can do is create Outbound NAT rules so each subnet egresses from a different address.

                  Port forward inbound are controlled by which address the outside clients are told to connect to. Any outside address can be forwarded to any inside address.

                  Chattanooga, Tennessee, USA
                  The pfSense Book is free of charge!
                  DO NOT set a source port in a port forward or firewall rule unless you KNOW you need it!
                  Do Not Chat For Help! NO_WAN_EGRESS(TM)

                  1 Reply Last reply Reply Quote 0
                  • First post
                    Last post