Giving public ip addresses to servers behind pfsense
-
Hi pfsense team, i have public address as 1.1.1.1/25 from isp, 1.1.1.1 gw and 1.1.1.2 is pfsense wan interface, i have also lan interface 192.168.1.0/24, now i want give other ips (1.1.1.3-126) addresses to my servers which are behind pfsense how can i do this without using any NAT???
-
Call your ISP and have them give you a /29 on the interface and route the /25 to your address on that. Then you can just put all or part of the /25 on that inside interface.
-
and i think i should give one of this ip addresses to my server_interface and this ip should also be gateway of servers?
-
Yes. Just like you would with an rfc1918 network.
If they routed 1.1.1.0/25 to you:
Interface: 1.1.1.1 /25
Usable: 1.1.1.2 - 1.1.1.126
They'd set 1.1.1.1 as the gateway.
Or you could configure DHCP to hand out the addresses if you wanted.
You could also just use a /26, /27, /28, /29, /30, /31 on the inside interface and use the rest of the space for other purposes.
