Two PFsense firewalls and same WAN ip adresses

[Thompha]

Hello,

Just wondering if this setup is possible. Two companys share the same ISP and uses adresses in a ..197.17/28 WAN net. That gives us like 12 available IP adresses. I want to use two pf sense firewalls to split them. These firewalls will be plugged in to the same switch. Like this:

/ –> FW1 --> LAN1
INTERNET --> SWITCH
                              \ --> FW2 --> LAN2

If we say as an example that FW1 has WAN ip "..197.20" and FW2 has WAN ip "..197.21", can I then use the virtual IP option to add more ip adresses to both of them? Like ..197.21-23 to FW1 and ..197.25-27 to FW2?

[Guest]

Yes you can do this, although you don't actually need two firewalls.  A separate LAN card in one firewall will do this job as long as you are making judicious use of firewall rules to keep the two companies separate.  But yes, you can definitely do this with 2 firewalls.

[Supermule]

Two firewalls cannot share the same IP…..But different IP's over the same physical wire, is possible.