Need to create a gateway for new subnet on internal interface



  • So I had 1 public IP, reserved via DHCP. I was given a small block of IPs 1.1.1.176/29 on a different subnet. They're routing this block to me.

    Would I use 1:1 for this?
    Specifying
    Interface: WAN
    External IP: 1.1.1.177
    Internal IP 1.1.1.176/29
    Destination: any

    signed, home user over their head. :)



  • You can use 1:1, or port forwards, or assign it directly to an internal interface, depends on what you want to accomplish. Details on using additional public IPs in http://pfsense.org/book



  • @cmb:

    You can use 1:1, or port forwards, or assign it directly to an internal interface, depends on what you want to accomplish. Details on using additional public IPs in http://pfsense.org/book

    Assigning it to an internal interface is what my ISP said I need to do. I bought the book but I'm still a bit confused on translating what I need in to pfSense-language.

    I'm supposed to "assign the first IP in my block to an internal interface. Then use that as the gateway for that subnet".

    The way the 1:1 configuration looks seems to best fit that description.

    Alternatively, I could just use the new block of IPs and pretty much ignore the single DHCP reservation I have. 
    I'm still scouring forum posts for something similar to my situation.

    So far I've tried adding a new gateway: system->routing->gateways, but the IP address doesn't lie withing the subnet of the interface. Which makes sense.

    I have to wait for the ISP to now actually route the ips my way.  But I looked at VLANs and the cheap switches I have at home aren't compatible.  So I think that would leave me 1:1 NAT?



  • That's if you want to route public IPs, you don't have to. If you don't have a need to isolate publicly-reachable hosts on a separate NIC or VLAN with the public IP subnet, just add the additional subnet's IPs as Other VIPs and use them with NAT as needed. Or don't need VIPs at all if you're strictly using 1:1 NAT, just setup the 1:1 and you're done.


Log in to reply