How to setup static ips on OPT1

jake-mia

Hello, I have /27 network with public ips for web servers that I want on the internet.

This article is exactly what I want.
https://docs.netgate.com/pfsense/en/latest/recipes/route-public-ip-addresses.html

I have a /27 network instead of a /29. My co-lo company assigned me a /30 network and default gateway for the WAN interface.
I have setup my netgate 7100 device exactly like this article describes with my web servers on OPT1. The servers plug into a cisco 4948 switch plugged into OPT1. From the internet i cannot reach any of my servers. I think the problem is that my servers on OPT1 all have static ips. Now my default gateway has moved to the /30 network on the WAN interface. Previously my default gateway x.x.x.225 was on the /27 network. So i need to edit the servers and change the default gateway for the all the static ips. I setup the OPT1 interface on x.x.x.228, the first addressable address in my /27 network just like the example. What should i use for the default gateway on these servers? OPT1 currently has "none" for the gateway. Do i use x.x.x228 or do i need to build a static route to the WAN gateway. Or do something else? The /27 network has no gateway now.

Again i have built everything exactly like the article says. Creating firewall rules as described in article to open WAN and OPT1 for traffic.
Any advice appreciated. thanks, --jake

viragomann

@jake-mia said in How to setup static ips on OPT1:

I setup the OPT1 interface on x.x.x.228, the first addressable address in my /27 network just like the example. What should i use for the default gateway on these servers?
OPT1 currently has "none" for the gateway.

Well.

Do i use x.x.x228

Yes.

Don't forget to add rule to OPT1 to allow outbound and to WAN for inbound.

jake-mia

Thank you so much viragomann. I used the interface ip as my default gateway. Thank you for telling me about the extra rule needed on WAN with source * going to OPT1. That rule is not in the article. This issue is resolved!

johnpoz

@jake-mia said in How to setup static ips on OPT1:

extra rule needed on WAN with source * going to OPT

the only rules need on wan would be rules to allow what you want.. if you don't want to allow any unsolicited inbound traffic to this network, then you wouldn't need or want any rules on your wan for that netblock.