Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    How to put IP Aliases in LAN?

    Scheduled Pinned Locked Moved General pfSense Questions
    9 Posts 3 Posters 4.3k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • S
      syedadi
      last edited by

      I've 2 network in my enviroment:

      1> 192.168.0.0/24
      2> 192.168.2.0/24

      my PfSense box is in 192.168.0.0/24 segment,my problems is, myBOX cannot see the second segment. how do i setting my LAN so that the LAN can join the second segment(192.268.2.0/24) with out putting any additional NIC?

      This setting can be done, but i don't find it in the web configuration, the LAN only can have 1-IP

      1 Reply Last reply Reply Quote 0
      • N
        Nachtfalke
        last edited by

        Hi,

        not sure how this works in pfsense but I think there is an option "Virtual IP". I think this could help you (if you do not have/like tuj use VLANs)

        1 Reply Last reply Reply Quote 0
        • S
          syedadi
          last edited by

          OK thanks 4 the info…i try..

          1 Reply Last reply Reply Quote 0
          • S
            syedadi
            last edited by

            Can you show me step-by-step to this..I think i'm lost it…to much to configure i assume: :'(

            This is the step i'v take:  ??? ??? ???

            1. Firewall: Virtual IP Addresses
                >i put a IP Alias in LAN there with 192.168.2.0/24 network
            2. Interfaces: Assign network ports
                >Interfaces: VLAN
                  >> i put one IP fo VLAN at LAN interface with VLAN tag 1
            3. Interfaces: Assign network ports
                >I put the new interface OPT1 (VLAN 1)
            4. Interfaces: OPT1
                > i enable the interface
                > i put the new IP in the OPT1 with 192.168.2.222

            I still can't ping any client in 192.168.2.0/24 network, help me please

            1 Reply Last reply Reply Quote 0
            • N
              Nachtfalke
              last edited by

              Hi,

              as I said in my previous post I do not know how this is working with pfsense.
              Perhaps someone else can give you more advice or you will find some help in the forum when searching for "virtual IP".

              Sorry but if I could I would help you!

              1 Reply Last reply Reply Quote 0
              • W
                wallabybob
                last edited by

                Why don't you just change the network mask on all systems to 22 bits: 192.168.0.0/22 so that 192.168.0.0/24 and 192.168.2.0/24 are in the same network?

                You haven't said you need any isolation between 192.168.0.0/24 and 192.168.2.0/24 so put them in the same network.

                1 Reply Last reply Reply Quote 0
                • N
                  Nachtfalke
                  last edited by

                  @wallabybob:

                  Why don't you just change the network mask on all systems to 22 bits: 192.168.0.0/22 so that 192.168.0.0/24 and 192.168.2.0/24 are in the same network?

                  You haven't said you need any isolation between 192.168.0.0/24 and 192.168.2.0/24 so put them in the same network.

                  This could work but just to make it clear:
                  There will NEVER be a kind of isolation from sight of security between the "subnets" because the pfsense will never be involved if traffic is only transferred on Layer 2.

                  1 Reply Last reply Reply Quote 0
                  • S
                    syedadi
                    last edited by

                    @Nachtfalke:

                    @wallabybob:

                    Why don't you just change the network mask on all systems to 22 bits: 192.168.0.0/22 so that 192.168.0.0/24 and 192.168.2.0/24 are in the same network?

                    You haven't said you need any isolation between 192.168.0.0/24 and 192.168.2.0/24 so put them in the same network.

                    This could work but just to make it clear:
                    There will NEVER be a kind of isolation from sight of security between the "subnets" because the pfsense will never be involved if traffic is only transferred on Layer 2.

                    Thanks,

                    But i can't do this, the reason my network have two isolated subnet because of the security, so changing the subnetmask is not piratical.

                    1 Reply Last reply Reply Quote 0
                    • W
                      wallabybob
                      last edited by

                      @syedadi:

                      the reason my network have two isolated subnet because of the security, so changing the subnetmask is not piratical.

                      You may find it helpful to read http://forum.pfsense.org/index.php/topic,39604.0.html

                      It is not a trivial task to provide real isolation between two subnets sharing the same ethernet segment.

                      1 Reply Last reply Reply Quote 0
                      • First post
                        Last post
                      Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.