Giving public ip addresses to servers behind pfsense



  • Hi pfsense team, i have public address as 1.1.1.1/25 from isp, 1.1.1.1 gw and 1.1.1.2 is pfsense wan interface, i have also lan interface 192.168.1.0/24, now i want give other ips (1.1.1.3-126) addresses to my servers which are behind pfsense how can i do this without using any NAT???
    0_1537897188596_Untitled.jpg


  • LAYER 8 Netgate

    Call your ISP and have them give you a /29 on the interface and route the /25 to your address on that. Then you can just put all or part of the /25 on that inside interface.



  • and i think i should give one of this ip addresses to my server_interface and this ip should also be gateway of servers?


  • LAYER 8 Netgate

    Yes. Just like you would with an rfc1918 network.

    If they routed 1.1.1.0/25 to you:

    Interface: 1.1.1.1 /25
    Usable: 1.1.1.2 - 1.1.1.126
    They'd set 1.1.1.1 as the gateway.
    Or you could configure DHCP to hand out the addresses if you wanted.
    You could also just use a /26, /27, /28, /29, /30, /31 on the inside interface and use the rest of the space for other purposes.


Log in to reply