Routing for Cogent
I am switching my pfSense from a /28 from Centurylink to a /28 from Cogent.
With Centurylink, it's simple: the first host of my /28 is provided by CL and is my gateway for the remainder of the hosts. All I need to do is assign pfSense an IP and a gateway, and it works! Centurylink Example:
GW: 126.96.36.199 (provided by CL upstream on a Cisco device)
Remaining hosts: 188.8.131.52-184.108.40.206
Moving to Cogent, they have assigned my Router a /29 and my clients a /28:
Connected Address Block: 220.127.116.11/29
Cogent Router port IP/Gateway: 18.104.22.168
Customer Router Port IP: 22.214.171.124
Cogent Assigned IP Block : 126.96.36.199/28
I'm pretty sure I that if I assign the pfSense WAN an IP of: 188.8.131.52 and a GW of: 184.108.40.206 then my LAN will have access to the internet.
Question #1 is: How do I use the remaining IP address? Can I simply add Virtual IP/Alias?
Question #2 is: Can I provision a pfSense with WAN an IP of: 220.127.116.11 and a GW of: 18.104.22.168, then set up the LAN as 22.214.171.124/28 and then provision other pfSense(s) on 126.96.36.199-188.8.131.52, each with their own LAN?
@unsichtbarre #1 yes and #2 yes, not just pfsenses, also hosts with internet services in a dmz, filtered by pf rules as needed.
If #2, how do I enable generic (forward all traffic) downstream routing to the pfSenses 184.108.40.206-220.127.116.11?
@unsichtbarre You don't. Your isp has routed the /28 behind 18.104.22.168
Just put firewall rules, as usual.
Downstream pfsenses will have 47.33 as default gw. (and nat any traffic behind them)
I get a few more IPs than I had with CL!
robert321 last edited by
@netblues thank you this was very helpful!