Need help with sticky ip's from sbc.yahoo
-
Sbc yahoo issued me 8 static ip addresses. But what is wierd is that I still am required to have my router configured as pppoe login. I am assigned the same permanent IP every time I log in, but I have a total of 8 ip addresses that I can work with according to my isp. How do I configure pfsense to route the rest of these external ip addresses to my internal ip's?
-
The easiest thing is to setup an additional DMZ Interface with the /29 subnet that holds these 8 public IPs. Then shutdown NAT for this segment by enabling advanced outbound nat at firewall>nat, oubound. Delete all mappings for this segment. Now you can give your hosts in the DM'Z really public IPs that are just routed. You need firewallrules to allow traffic of course.
Other option is to add the additional public IPs as Virtual IPs and work with portforwards.
-
Here's what I do. I have the same setup, but I only have 5 IPs.
I have the Netopia router take care of the PPPoE login and it takes the "gateway" address at the end of the subnet. You have to put the Netopia in transparent bridge mode. Let me know if you need to know how to do this. That leaves me with my initial 5 IPs for the using.
In pfSense, set up a WAN interface that is set to 'static'. When the interface page wants the IP address for the interface, assign it one from your block and set the gateway to the "gateway" address (the one that the Netopia took). That's it. Check the interface status page and see if the interface is up, then set up firewall/NAT rules and see if you have access to the internet.
To assign the rest of your public IPs to certain machines on your network, go to "Firewall", then Virtual IPs. Set them up as CARP addresses (you may can do it under other types but I haven't been able to make them work in any but CARP). Then go to NAT, 1:1, and assign the addresses you just configured under Virtual IPs to the machines in your private network.
-
My only problem I guess is, I dont have a netopia modem/router. I have a speedstream 5360. Is it possible with this modem?