ISP handed me a block of IP's confused as how to configure as worded

[jason4532]

ISP gave me this information. I am unsure what to use as a wan and gateway.

*************** IP ASSIGNMENTS ****************
ISP WAN: 71.100.1.53 255.255.255.252
CUSTOMER WAN: 71.100.1.54 255.255.255.252

LAN SUBNET: 71.100.8.232 255.255.255.248
LAN GATEWAY: 71.100.8.233 255.255.255.248
LAN Range: 71.100.8.233 - 71.300.8.238

[johnpoz]

@jason4532

So they are routing that 71.100.8.232/29 to you would be the way I would read that.

And on pfsense wan you would set IP as 71.100.1.54/30 with its gateway as 71.100.1.53

Your wanting to use this /29 behind pfsense without nat?

https://docs.netgate.com/pfsense/en/latest/recipes/route-public-ip-addresses.html

Or if that /29 is routed to you, you could also just use them as vips on your pfsense wan.

[tinfoilmatt]

@jason4532

WAN interface: 71.100.1.54
mask: 255.255.255.252 (i.e., /30)
gateway: 71.100.1.53

LAN interface: 71.100.8.233
mask: 255.255.255.248 (i.e., /29)
gateway: none

start there and confirm connectivity.

it seems like you could then also make use of 71.100.8.234 through .238 (using the same mask and 'none' gateway) on any additional LAN interfaces your box has, as LAGG interfaces, or on downstream interfaces. but that part a little unclear based on the limited information you've provided.

[jason4532]

@cyberconsultants I am doing some testing now. My plan is two have two separate networks on different static ips. I am using a netgate XG-1537, With an Intel X710BM2 network card. To handle my Wan and block of static ip's, to each there own opt port to two dream machines. ideally with no nat on the pfsense box. I want the dream machines to handle all firewall/nat/routing for each network.
.

[tinfoilmatt]

@jason4532 should be able to make that work as-described.

[jason4532]

@cyberconsultants

Wan is working as it should. Lan is configured with the .8.233 with dhcp have connectivity.
I am trying to setup a opt port with the .8.235, I am getting a error .8.235 is being used by or overlaps with Lan 71.181.8.233/29

[tinfoilmatt]

@jason4532 can you post a screencap of the LAN interface config?

assuming LAN interface is now on the 71.100.8.232/29 subnet, isn't your desired config to now assign .235 to a downstream "WAN" interface on one of the UDMs?

[johnpoz]

@jason4532 said in ISP handed me a block of IP's confused as how to configure as worded:

is being used by or overlaps with Lan 71.181.8.233/29

Because it does 8.235 falls inside the .232/29

If you want to use different IPs on lan side interfaces of that /29 you would have to break it up to 2 /30s

yeah assigned you a "LAN SUBNET: 71.100.8.232 255.255.255.248" that they routed to you.. if you want to create 2 networks from that you would have to subnet it 2 /30's or they would overlap.

Or use the .233 on pfsense and then setup clients on that network with with .234 - .238

[tinfoilmatt]

@johnpoz said in ISP handed me a block of IP's confused as how to configure as worded:

If you want to use different IPs on lan side interfaces of that /29 you would have to break it up to 2 /30s

since that's but one of many ways to do what it seems like OP may be trying to accomplish, we should let them clarify before suggesting any one possible config.

[johnpoz]

@cyberconsultants He can not use multiple IPs on different pfsense interfaces that overlap..

If he wants multiple IPs on pfsense out of that /29 he would have to break it down so they don't overlap..

He could use vips and then nat.. But if he wants the native network on pfsense and clients behind it and wants more than 1 network he would have to subnet.. There is no other way around it.

[tinfoilmatt]

@johnpoz said in ISP handed me a block of IP's confused as how to configure as worded:

If he wants

But if he wants

exactly. they should clarify—and then potential solutions might be suggested accordingly.

throwing everything you can possibly imagine out there plus gratiutious snark (plus insta-edits) is super confusing.

[johnpoz]

@jason4532 said in ISP handed me a block of IP's confused as how to configure as worded:

My plan is two have two separate networks on different static ips

ideally with no nat on the pfsense box

That seemed pretty clear to me to what he is wanting to do.. Not sure what is confusing about that for you.

[jason4532]

@cyberconsultants basically all I am trying to do is the following.

I have two dream machines I want each to have their own static Wan ip. I plan on using the pfsense box to give each DM box their own static ip via their own port from the pfsense box . I don't want pfsense to do nat/firewall for either network.

[johnpoz]

@jason4532 so break that /29 to 2 /30s and then there you go.. Just like already went over.. But @cyberconsultants seems to be confused..

[jason4532]

@johnpoz said in ISP handed me a block of IP's confused as how to configure as worded:

yeah assigned you a "LAN SUBNET: 71.100.8.232 255.255.255.248" that they routed to you.. if you want to create 2 networks from that you would have to subnet it 2 /30's or they would overlap

Does the isp need to subnet it or can I just set my interfaces with /30 ?

[johnpoz]

@jason4532 no the isp doesn't need to do anything.. They already routed the /29 to you.. Just put one /30 on interface 1 and the other /30 on interface 2

[tinfoilmatt]

@jason4532 still would like to see LAN interface config screencap to confirm because part of your earlier reply was a bit confusing. (i.e., "Lan is configured with the .8.233 with dhcp have connectivity.")

set pfSense configuration aside for a moment. how are the UDMs going to connect to the pfSense host? you want them to connect directly to their own individual pfSense interfaces on the Intel NIC, correct?

if so, you could bridge LAN and OPT interfaces (Interfaces / Bridges) which would allow both interfaces to occupy the same subnet.

[tinfoilmatt]

@johnpoz said in ISP handed me a block of IP's confused as how to configure as worded:

But @cyberconsultants seems to be confused..

i henceforth dub thee King Of Kludge!

[johnpoz]

@cyberconsultants How is subnetting a /29 that is routed to you to 2 /30s kluge?

[tinfoilmatt]

@johnpoz because bridging the interfaces might be the more elegant solution.

*kludge