WAN with PPPOE dynamic IP and alternative static IP

[sn00p]

Hi,

We've just switched providers for our broadband, we were previously using an ADSL connection which had a static IP assigned to it which we  used various port forwards on for services.

We switched to BT infinity earlier this week and have a block of 5 static IP's, however, the WAN connection itself uses a dynamic IP and BT know to route our static IP's to our connection.

I've already got our VoIP system up and running with one of these static IP's, if I go to "whatsmyip" from the VoIP machine it shows the static IP and if I go from any other machine it shows the dynamic IP of the WAN.  Perfect.

Now, I've successfully got IPSEC working on the pfsense box, but because of the PPPOE connection to the modem, it's on a dynamic ip which obviously changes!  So how do I get the WAN IP to respond to one of my static IP's?

I can't seem to figure out how to do it or force the WAN connection to have a static IP.

Thanks.

[rootlurker]

Hi,

I thought you have 5 STATIC IP assigned by your ISP, and you also said it on dynamic IP?

Also, "So how do I get the WAN IP to respond to one of my static IP's?" which WAN IP?

[marcelloc]

Will not be easy to establish a connection from other interface ip.

The best thing to do is assign a dynamic dns on wan or install a second pfsense for VPN with one of your fixed ips.

But you can try an outbound nat on wan with one of yours static ips first.

[sn00p]

@rootlurker:

Hi,

I thought you have 5 STATIC IP assigned by your ISP, and you also said it on dynamic IP?

Also, "So how do I get the WAN IP to respond to one of my static IP's?" which WAN IP?

Hi,

The weirdness of BT's setup is that when you connect using PPPoE they assign your connection a dynamic IP.

However, we have 5 static IP's that we pay extra for, so somewhere in BT's network, they know to route traffic for those 5 IP's to our dynamic IP, this works fine when we're dealing with another machine on the network, we just set up 1:1 mapping and the packets coming in on that IP go to the local machine and packets destined to go out over the WAN appear to originate from the static IP.

It all works fine using 1:1 mapping when there's another machine on the network, but in my case the pfsense box needs to be a VPN endpoint, so I need it to act on traffic coming in from one of the static IP's itself which is what I can't figure out what to do!

Thanks