Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Issue with a block of 16 IPv4 addresses

    Scheduled Pinned Locked Moved General pfSense Questions
    54 Posts 6 Posters 9.1k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • L
      landman16
      last edited by

      Hello all hope your all well, happy new year to you all

      SO, after a little bit of support to try and get my block of 16 IPv4 addresses working.

      Now Zen Internet (UK) is now routing their block of 16 IP’s to me like this:

      217.13.XX.193
      217.13.XX.194
      217.13.XX.195
      217.13.XX.196
      217.13.XX.197
      217.13.XX.198
      217.13.XX.199
      217.13.XX.200
      217.13.XX.201
      217.13.XX.202
      217.13.XX.203
      217.13.XX.204
      217.13.XX.205
      217.13.XX.206
      217.13.XX.207 (router/firewall)
      217.13.XX.208 (broadcast address)

      I currently have my Pfsense box managing the PPPOE connection. I need to know what IP to put where in Pfsense to get it working, I’ve tried many different ways and all fail on me.

      Any help would be greatly appreciated

      1 Reply Last reply Reply Quote 0
      • NogBadTheBadN
        NogBadTheBad
        last edited by NogBadTheBad

        Hello from another Zen Internet user ☺

        Use the others as VIPS and do a 1:1 nat or nat if you dont need a 1:1.

        https://www.netgate.com/docs/pfsense/firewall/virtual-ip-address-feature-comparison.html

        Andy

        1 x Netgate SG-4860 - 3 x Linksys LGS308P - 1 x Aruba InstantOn AP22

        1 Reply Last reply Reply Quote 0
        • L
          landman16
          last edited by

          With my previous supplier all I needed to do was to set the PPPOE data and then under services -> DHCP Server set my avalible Range in there. But zen appears to be totally different

          NogBadTheBadN 1 Reply Last reply Reply Quote 0
          • NogBadTheBadN
            NogBadTheBad @landman16
            last edited by

            @landman16

            You have hosts the WAN side of pfSesnse ?

            Andy

            1 x Netgate SG-4860 - 3 x Linksys LGS308P - 1 x Aruba InstantOn AP22

            1 Reply Last reply Reply Quote 0
            • L
              landman16
              last edited by

              I have file servers behind the pfsense box

              1 Reply Last reply Reply Quote 0
              • NogBadTheBadN
                NogBadTheBad
                last edited by NogBadTheBad

                Is 217.13.XX.207 your WAN interface IP ?

                If it is you'll need to do a 1:1 nat.

                Andy

                1 x Netgate SG-4860 - 3 x Linksys LGS308P - 1 x Aruba InstantOn AP22

                L 1 Reply Last reply Reply Quote 0
                • L
                  landman16
                  last edited by

                  The way the servers were configured was the public ip, subnet mask and the public gateway address were directly assigned to the nic card on the servers

                  1 Reply Last reply Reply Quote 0
                  • L
                    landman16 @NogBadTheBad
                    last edited by

                    @nogbadthebad I have tried that server still now resolving

                    1 Reply Last reply Reply Quote 0
                    • JKnottJ
                      JKnott
                      last edited by

                      It looks to me like they're just giving you a block of addresses and expect you to use them as is. This means you need a pass through firewall that does not do routing and especially not NAT. If you were to connect all those servers, through a switch, to the ISP, I bet they'd work. You could certainly do that, but you'd want to make sure the firewall on each server is configured correctly. Perhaps you could set up pfSense as a bridge between the WAN and LAN interfaces and set up the appropriate rules.

                      PfSense running on Qotom mini PC
                      i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
                      UniFi AC-Lite access point

                      I haven't lost my mind. It's around here...somewhere...

                      1 Reply Last reply Reply Quote 0
                      • johnpozJ
                        johnpoz LAYER 8 Global Moderator
                        last edited by

                        @landman16 said in Issue with a block of 16 IPv4 addresses:

                        217.13.XX.207 (router/firewall)

                        Im with jknott, If they told you that was the router - then that block is not "routed" to you.. But they just attached them to your connection.

                        They would not tell you what the router is if they actually routed that .192/28 to you.. Since it would just be routed to your current IP. And then yeah you could put the /28 behind pfsense without any nat.

                        An intelligent man is sometimes forced to be drunk to spend time with his fools
                        If you get confused: Listen to the Music Play
                        Please don't Chat/PM me for help, unless mod related
                        SG-4860 24.11 | Lab VMs 2.8, 24.11

                        1 Reply Last reply Reply Quote 0
                        • L
                          landman16
                          last edited by

                          Zen are not even able to tell me how they are routing the IPs to me. This is half the battle if they could I wouldn’t be where I am now

                          NogBadTheBadN JKnottJ 2 Replies Last reply Reply Quote 0
                          • NogBadTheBadN
                            NogBadTheBad
                            last edited by

                            @nogbadthebad said in Issue with a block of 16 IPv4 addresses:

                            Is 217.13.XX.207 your WAN interface IP ?

                            We'd know exactly how to help if you answered the question I posted.

                            Is 217.13.XX.207 your WAN interface IP ?

                            "I have tried that server still now resolving" doesn't really mean a thing.

                            Andy

                            1 x Netgate SG-4860 - 3 x Linksys LGS308P - 1 x Aruba InstantOn AP22

                            L 1 Reply Last reply Reply Quote 0
                            • NogBadTheBadN
                              NogBadTheBad @landman16
                              last edited by

                              @landman16 said in Issue with a block of 16 IPv4 addresses:

                              Zen are not even able to tell me how they are routing the IPs to me. This is half the battle if they could I wouldn’t be where I am now

                              Sorry but I find that very hard to believe, they are one of the better ISPs in the UK.

                              Andy

                              1 x Netgate SG-4860 - 3 x Linksys LGS308P - 1 x Aruba InstantOn AP22

                              1 Reply Last reply Reply Quote 0
                              • L
                                landman16 @NogBadTheBad
                                last edited by

                                @nogbadthebad yes that is the WAN address

                                1 Reply Last reply Reply Quote 0
                                • NogBadTheBadN
                                  NogBadTheBad
                                  last edited by NogBadTheBad

                                  OK then you need to nat those addresses, but not 217.13.XX.207

                                  217.13.XX.192/28 can't exist on your WAN and LAN interface.

                                  Andy

                                  1 x Netgate SG-4860 - 3 x Linksys LGS308P - 1 x Aruba InstantOn AP22

                                  JKnottJ 1 Reply Last reply Reply Quote 0
                                  • johnpozJ
                                    johnpoz LAYER 8 Global Moderator
                                    last edited by johnpoz

                                    If .207 is your WAN, then that /28 is not "routed" to you... Your just attached to that network, yeah your going to have to NAT to use them as vips.

                                    Have them ROUTE the /28 to you if you want to put it behind pfsense.

                                    An intelligent man is sometimes forced to be drunk to spend time with his fools
                                    If you get confused: Listen to the Music Play
                                    Please don't Chat/PM me for help, unless mod related
                                    SG-4860 24.11 | Lab VMs 2.8, 24.11

                                    1 Reply Last reply Reply Quote 0
                                    • L
                                      landman16
                                      last edited by

                                      How would I go about doing that ?

                                      1 Reply Last reply Reply Quote 0
                                      • johnpozJ
                                        johnpoz LAYER 8 Global Moderator
                                        last edited by johnpoz

                                        Doing what? Routed call your ISP and tell them to route that /28 you via transit network..

                                        1:1 nat just create those IPs as vips and do 1:1 nat..
                                        https://www.netgate.com/docs/pfsense/book/nat/1-1-nat.html

                                        An intelligent man is sometimes forced to be drunk to spend time with his fools
                                        If you get confused: Listen to the Music Play
                                        Please don't Chat/PM me for help, unless mod related
                                        SG-4860 24.11 | Lab VMs 2.8, 24.11

                                        1 Reply Last reply Reply Quote 0
                                        • NogBadTheBadN
                                          NogBadTheBad
                                          last edited by

                                          https://www.netgate.com/resources/videos/nat-on-pfsense-23.html

                                          Andy

                                          1 x Netgate SG-4860 - 3 x Linksys LGS308P - 1 x Aruba InstantOn AP22

                                          1 Reply Last reply Reply Quote 0
                                          • JKnottJ
                                            JKnott @landman16
                                            last edited by

                                            @landman16 said in Issue with a block of 16 IPv4 addresses:

                                            Zen are not even able to tell me how they are routing the IPs to me. This is half the battle if they could I wouldn’t be where I am now

                                            If they're just giving you a block of addresses, then use them that way. No need to route them. As I mentioned above, you just need a bridge/firewall, to pass the addresses to the servers. Take a computer, configure it with a static address from that list. If it works, that's all you need to do for each server. Also, if those servers run Linux, they will already have a good firewall built in. Just configure and you wouldn't even need pfSense, though an extra layer of protection is better.

                                            PfSense running on Qotom mini PC
                                            i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
                                            UniFi AC-Lite access point

                                            I haven't lost my mind. It's around here...somewhere...

                                            DerelictD 1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.