<![CDATA[Using a public IP on a DMZ interface while PPPoE is configured on the WAN]]>Hi,
Is it possible to use additional IP addresses from a subnet (/30) that is assigned via a PPPoE account on the WAN port, on a separate interface?
The goal is to use these IP addresses without NAT, so the public IP can be assigned directly.
We are currently using a DrayTek where this works via the routed subnet configuration.
Does anyone have experience with a similar setup on other equipment?
We need to make this public IP address available to a third party that does not want to use NAT.

]]>https://forum.netgate.com/topic/200640/using-a-public-ip-on-a-dmz-interface-while-pppoe-is-configured-on-the-wanRSS for NodeThu, 18 Jun 2026 14:45:39 GMTWed, 06 May 2026 14:27:10 GMT60<![CDATA[Reply to Using a public IP on a DMZ interface while PPPoE is configured on the WAN on Tue, 12 May 2026 06:15:19 GMT]]>We found an undocumented solution by doing our own investigation.
It works by creating an interface that has the same IP address (.30) as the one assigned to you by PPPoE on your WAN.
Note: configure this before PPPoE becomes active; otherwise, you won’t be able to set the address.
Next, disable NAT for traffic originating from this interface and create a firewall rule for incoming traffic on the interface with the public IP you are using as the destination.

You can now use a public IP address on the host behind the DMZ you just created.
As the gateway, use the WAN address that is also configured on your DMZ port.

]]>https://forum.netgate.com/post/1242557https://forum.netgate.com/post/1242557Tue, 12 May 2026 06:15:19 GMT<![CDATA[Reply to Using a public IP on a DMZ interface while PPPoE is configured on the WAN on Wed, 06 May 2026 18:35:59 GMT]]>@itnl sure if they route that subnet to your WAN IP.
https://docs.netgate.com/pfsense/en/latest/recipes/route-public-ip-addresses.html

]]>https://forum.netgate.com/post/1242372https://forum.netgate.com/post/1242372Wed, 06 May 2026 18:35:59 GMT