Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    WAN Address config with VIPs

    Scheduled Pinned Locked Moved HA/CARP/VIPs
    4 Posts 2 Posters 734 Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • J
      jakemurray
      last edited by

      Hi, I've been provided with 5 public IPv4 addresses within the /23 subnet in my colo. Currently, I've configured the WAN address to use xxx.xxx.xxx.60 /23 and the VIPs to use .61 .62. 63 .64 /32.

      I've noticed sometimes, after rebooting the appliance, the WAN IP changes to .61 rather than .60, causing OVPN to break. I'm wondering what the correct WAN configuration is. Should I be using xxx.xxx.xxx.60/32 rather than /23 for the WAN interface?

      KOMK 1 Reply Last reply Reply Quote 0
      • KOMK
        KOM @jakemurray
        last edited by

        @jakemurray Are you sure it's a /23? That's more than 500 addresses, an awfully large mask for 6 IPs. I have 12 IPs in a /28. Maybe it's really a /29? Regardless, the WAN IP shouldn't change unless it's configured to use DHCP.

        J 1 Reply Last reply Reply Quote 1
        • J
          jakemurray @KOM
          last edited by

          @kom Thanks for your response. I've just checked my welcome email that details the network info and it is definitely /23 Subnet mask 255.255.254.0

          I'm not 100% sure that the IP address changes but the address shown in the WAN status widget changes to .61

          Could you clarify if the WAN interface should be configured to use a subnet that is large enough for all VIPs or if it should be set to /32 for the single IP?

          KOMK 1 Reply Last reply Reply Quote 0
          • KOMK
            KOM @jakemurray
            last edited by

            @jakemurray That's a big subnet for 6 IPs. You might want to check with them on that. And yes, your WAN static config should be the IP address and the mask of the subnet, so /23 in your case.

            1 Reply Last reply Reply Quote 0
            • First post
              Last post
            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.