PFSense as a WAN Router

  • Is there any information about setting up PF Sense as a WAN Router ? We have a Class C Public IP that will provide services from Virtual Servers each one of them bound to a public IP, but we still would like to use PFSense as the perimeter router for the Class.
    Does this make sense or should I be looking for a different box all together ?

    I see that in the PFSense book it talks about using PFSENSE as a wan router but there nothing more specific then that.


  • Rebel Alliance Developer Netgate

    That's just a normal routing scenario. You'd need an IP address in a separate subnet for pfSense to use as its WAN IP, and then assign an IP in that class C as pfSense's LAN IP, which will be the gateway for your servers. Disable NAT (switch to manual outbound NAT and delete all of the rules) and it should all work normally.

  • Let me see if I get this straight

    WAN : Public IP from different subnet
    LAN : Public IPs Class C IP
    Disable NAT ( switch to manual outbound)

    GOT IT !!

  • Rebel Alliance Developer Netgate

    That's about it.

    Just be sure that after you switch to manual outbound NAT you delete the rules that show up that match your class C.

    And be sure that your class C is routed to your WAN IP by your upstream provider.

  • Would the setup be any different if I did not have a full Class C in the LAN ?

  • Rebel Alliance Developer Netgate

    Depends on what you do have on the LAN. As long as it is a full routable subnet it should be fine.

  • Nowadays, almost no-one cares about classful nets anymore, so I wouldn't worry about it.

Log in to reply