Using a public IP on a DMZ interface while PPPoE is configured on the WAN
-
Hi,
Is it possible to use additional IP addresses from a subnet (/30) that is assigned via a PPPoE account on the WAN port, on a separate interface?
The goal is to use these IP addresses without NAT, so the public IP can be assigned directly.
We are currently using a DrayTek where this works via the routed subnet configuration.
Does anyone have experience with a similar setup on other equipment?
We need to make this public IP address available to a third party that does not want to use NAT. -
@itnl sure if they route that subnet to your WAN IP.
https://docs.netgate.com/pfsense/en/latest/recipes/route-public-ip-addresses.html -
We found an undocumented solution by doing our own investigation.
It works by creating an interface that has the same IP address (.30) as the one assigned to you by PPPoE on your WAN.
Note: configure this before PPPoE becomes active; otherwise, you won’t be able to set the address.
Next, disable NAT for traffic originating from this interface and create a firewall rule for incoming traffic on the interface with the public IP you are using as the destination.You can now use a public IP address on the host behind the DMZ you just created.
As the gateway, use the WAN address that is also configured on your DMZ port.