• Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login
Netgate Discussion Forum
  • Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login

Configure 2 different IP ranges on one LAN interface

Scheduled Pinned Locked Moved DHCP and DNS
7 Posts 3 Posters 1.0k Views
Loading More Posts
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • J
    jgomez123
    last edited by Jul 21, 2020, 11:46 AM

    Good morning everyone,
    I would like to know how to configure 2 different IP ranges on one interface for my LAN. Example: 192.168.1.X / 24 for WiFi and a 10.20.20.X / 24 without using VLAN.

    I've been reading the option to use Virtual IP, but I don't know if it will do.

    Thank you and forgive my ignorance.

    J 1 Reply Last reply Jul 21, 2020, 4:42 PM Reply Quote 0
    • J
      JKnott @jgomez123
      last edited by Jul 21, 2020, 4:42 PM

      @jgomez123

      If you use virtual IPs then only one subnet will be able to use DHCP. The other has to be manually configured. Also, if you try to connect to a device on the other subnet, you'll get ICMP redirects. Why do you want to do this?

      PfSense running on Qotom mini PC
      i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
      UniFi AC-Lite access point

      I haven't lost my mind. It's around here...somewhere...

      1 Reply Last reply Reply Quote 0
      • J
        jgomez123
        last edited by Jul 22, 2020, 6:41 AM

        Hello,
        I want is to have 2 different networks on one interface without using VLANs. One for my LAN and one for the APs.

        1 Reply Last reply Reply Quote 0
        • J
          JeGr LAYER 8 Moderator
          last edited by Jul 22, 2020, 6:55 AM

          I want is to have 2 different networks on one interface without using VLANs. One for my LAN and one for the APs.

          It may be that this is your wish, but it's not the technical reality. If you want to separate IP ranges then you need proper VLANs or different hardware interfaces to connect to. Yes, you can add a IP Alias type of VirtualIP to your LAN interface but you don't have a clean proper setup and those IP ranges will intermix and overlap on the LAN. You don't configure two different networks on the same Layer2 network segment in a proper network setup, that's fact. Not even SoHo Routers let you do that because it's "wrong". This is no segmentation at all and a WiFi User could just change its IP manually to your LAN and access your devices so it makes no sense to do that in the first place.

          Add problems with DHCP, NTP, DNS and the like on top of it and you may get the idea of what headache such a setup would bring with it. :)

          Don't forget to upvote 👍 those who kindly offered their time and brainpower to help you!

          If you're interested, I'm available to discuss details of German-speaking paid support (for companies) if needed.

          J 1 Reply Last reply Jul 22, 2020, 7:33 AM Reply Quote 0
          • J
            jgomez123 @JeGr
            last edited by Jul 22, 2020, 7:33 AM

            @JeGr said in Configure 2 different IP ranges on one LAN interface:

            It may be that this is your wish, but it's not the technical reality. If you want to separate IP ranges then you need proper VLANs or different hardware interfaces to connect to. Yes, you can add a IP Alias type of VirtualIP to your LAN interface but you don't have a clean proper setup and those IP ranges will intermix and overlap on the LAN. You don't configure two different networks on the same Layer2 network segment in a proper network setup, that's fact. Not even SoHo Routers let you do that because it's "wrong". This is no segmentation at all and a WiFi User could just change its IP manually to your LAN and access your devices so it makes no sense to do that in the first place.
            Add problems with DHCP, NTP, DNS and the like on top of it and you may get the idea of what headache such a setup would bring with it. :)

            And if I use a new interface, do I configure the other IP range and connect it to the same switch?

            1 Reply Last reply Reply Quote 0
            • J
              JeGr LAYER 8 Moderator
              last edited by Jul 22, 2020, 8:42 AM

              @jgomez123 said in Configure 2 different IP ranges on one LAN interface:

              And if I use a new interface, do I configure the other IP range and connect it to the same switch?

              No, if you connect it to the same switch it would result in a loop being detected and one port shut down (if it's a decent switch) or a loop and flood (if it's a bad one). If you only want to hand out 10.x IPs via that Access Point, why not connect it to a new interface on your firewall directly?

              Or check if your switch can acutally handle VLANs and set them up and "have fun the right way" ;) If you want network separation, that would be a good way to go.

              Don't forget to upvote 👍 those who kindly offered their time and brainpower to help you!

              If you're interested, I'm available to discuss details of German-speaking paid support (for companies) if needed.

              J 1 Reply Last reply Jul 22, 2020, 10:00 AM Reply Quote 0
              • J
                jgomez123 @JeGr
                last edited by Jul 22, 2020, 10:00 AM

                @JeGr
                Thanks for the info. I am going to try to configure a new interface in the FW and connect this new interface to the switch master, to interconnect with all the switches.

                1 Reply Last reply Reply Quote 0
                1 out of 7
                • First post
                  1/7
                  Last post
                Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.
                  This community forum collects and processes your personal information.
                  consent.not_received