Subnet /23 into many /29
-
I have setup a gateway with IP 888.777.666.2/23. I am trying to find a way to create many /29 subnets using pfsense as a pass through. For example, trying to create 888.777.666.120/29 with gateway 888.777.666.121.
I tried creating a virtual IP 888.777.666.121/29 and a static route from 888.777.666.120/29 to 888.777.666.1/23 (WAN gateway). But though I can ping the machine at 888.777.666.122, I can't access it using SSH.
Please note that I can't create a new interface for each of the /29 because the machine cannot have so many network cards.
-
Ok so I completely disabled the firewall and it works fine now. So basically I am using pfsense in strict routing mode but that's all I need for now and I have another pfsense instance for LAN etc.
-
Is there any way to make this work without turning off the firewall completely? I need to keep the firewall enabled to use traffic shaping on some of the /29 subnets.
I have setup a rule to allow everything from any to any on WAN but that does not allow inbound access to any of the /29 IP addresses. Turning off the firewall does.
Can someone please help?
-
@shar0119 said in Subnet /23 into many /29:
Please note that I can't create a new interface for each of the /29 because the machine cannot have so many network cards.
That is why you would use vlans..
So this /23 is routed to you?
When you say gateway 888.777.666.121?? You mean assign pfsense interface with first IP in the subnet /29 off your /23 that is ROUTED to you??
Are we talking public space Here - or is this something your trying to do in rfc1918 space? Having a hard time figuring it out - since have never seen anyone that has clue one to how IP works use 888.777.x.x since those are clearly not valid IP ranges.. To show something as public 1.2.3.0/23 would told me ok public that he is trying to hide, etc.
If pfsense wan IP is using /23 mask of this 888.777.666.0/23 network... Then its not routed to you.. And you can not just create a lan side interface that overlaps that network like 888.777.666.120/29
