FTP throuhg VIP

DWAyotte · Dec 13, 2006, 5:01 PM

I am not having success forwarding FTP through a VIP.

I have PFSense forwarding it successfully through its WAN address, but when I forward through one of my VIPs it failes. I am using the ftp-proxy. I am wondering if it is just not possible.

sullrich · Dec 13, 2006, 5:08 PM

Use a CARP type VIP and it will work as needed.

xawiers · Dec 14, 2006, 5:30 AM

Hi
I tried to setup carp and get error:
our WAN ends with x.x.192.22
ISP gave us public IP's: with x.x.198.155 x.x.198.144

How do I setup carp if it replies with:
Sorry, we could not locate an interface with a matching subnet for 82.135.198.155/32. Please add an ip in this subnet on a real interface.

DWAyotte · Dec 20, 2006, 5:39 AM

You just need to change your subnet mask to match your range, but if i understand you correctly, both ranges are on different subnets, so i don't think that carp will work for you in this case.

xawiers · Dec 20, 2006, 5:44 AM

to set /16 netmask on WAN ?

maybe someone tried adding new wan card with different subnet ?
then it could be like bridge to lan network with VIP's ?

DWAyotte · Dec 21, 2006, 12:02 AM

Sorry I wasn't very clear. You said this "SP gave us public IP's: with x.x.198.155 x.x.198.144" So on your carp you would need to put in your proper subnet mask of your range, it looks like its probably 255.255.255.240 or /28

Does that make more sense? You said you had it set to a /32 and I think that on a carp VIP you need to put its proper subnet mask.

xawiers · Dec 21, 2006, 5:13 AM

@DWAyotte:

Sorry I wasn't very clear. You said this "SP gave us public IP's: with x.x.198.155 x.x.198.144" So on your carp you would need to put in your proper subnet mask of your range, it looks like its probably 255.255.255.240 or /28

Does that make more sense? You said you had it set to a /32 and I think that on a carp VIP you need to put its proper subnet mask.

Ok, trying /28 /26 /16 /8
answers (the last one):
Sorry, we could not locate an interface with a matching subnet for 82.135.198.144/8. Please add an ip in this subnet on a real interface.
should I change WAN subnet mask ?
I have x.x.192.22/24 on wan

DWAyotte · Dec 22, 2006, 6:34 PM

Your WAN address is on a different subnet than the VIP you are trying to assign so I don't think you will be able to assign your VIP to your WAN interface.

xawiers · Dec 23, 2006, 1:18 PM

so I have to set wan /16 and vip /16 ?