FTP throuhg VIP



  • I am not having success forwarding FTP through a VIP.

    I have PFSense forwarding it successfully through its WAN address, but when I forward through one of my VIPs it failes.  I am using the ftp-proxy.  I am wondering if it is just not possible.



  • Use a CARP type VIP and it will work as needed.



  • Hi
    I tried to setup carp and get error:
    our WAN ends with x.x.192.22
    ISP gave us public IP's: with x.x.198.155 x.x.198.144

    How do I setup carp if it replies with:
    Sorry, we could not locate an interface with a matching subnet for 82.135.198.155/32. Please add an ip in this subnet on a real interface.



  • You just need to change your subnet mask to match your range, but if i understand you correctly, both ranges are on different subnets, so i don't think that carp will work for you in this case.



  • to set /16 netmask on WAN ?

    maybe someone tried adding new wan card with different subnet ?
    then it could be like bridge to lan network with VIP's ?



  • Sorry I wasn't very clear.  You said this "SP gave us public IP's: with x.x.198.155 x.x.198.144" So on your carp you would need to put in your proper subnet mask of your range, it looks like its probably 255.255.255.240 or /28

    Does that make more sense?  You said you had it set to a /32 and I think that on a carp VIP you need to put its proper subnet mask.



  • @DWAyotte:

    Sorry I wasn't very clear.  You said this "SP gave us public IP's: with x.x.198.155 x.x.198.144" So on your carp you would need to put in your proper subnet mask of your range, it looks like its probably 255.255.255.240 or /28

    Does that make more sense?  You said you had it set to a /32 and I think that on a carp VIP you need to put its proper subnet mask.

    Ok, trying /28 /26 /16 /8
    answers (the last one):
    Sorry, we could not locate an interface with a matching subnet for 82.135.198.144/8. Please add an ip in this subnet on a real interface.
    should I change WAN subnet mask ?
    I have x.x.192.22/24 on wan



  • Your WAN address is on a different subnet than the VIP you are trying to assign so I don't think you will be able to assign your VIP to your WAN interface.



  • so I have to set wan /16 and vip /16 ?


Locked