Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Need to create a gateway for new subnet on internal interface

    Scheduled Pinned Locked Moved Routing and Multi WAN
    4 Posts 2 Posters 1.5k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • H
      hometoast
      last edited by

      So I had 1 public IP, reserved via DHCP. I was given a small block of IPs 1.1.1.176/29 on a different subnet. They're routing this block to me.

      Would I use 1:1 for this?
      Specifying
      Interface: WAN
      External IP: 1.1.1.177
      Internal IP 1.1.1.176/29
      Destination: any

      signed, home user over their head. :)

      1 Reply Last reply Reply Quote 0
      • C
        cmb
        last edited by

        You can use 1:1, or port forwards, or assign it directly to an internal interface, depends on what you want to accomplish. Details on using additional public IPs in http://pfsense.org/book

        1 Reply Last reply Reply Quote 0
        • H
          hometoast
          last edited by

          @cmb:

          You can use 1:1, or port forwards, or assign it directly to an internal interface, depends on what you want to accomplish. Details on using additional public IPs in http://pfsense.org/book

          Assigning it to an internal interface is what my ISP said I need to do. I bought the book but I'm still a bit confused on translating what I need in to pfSense-language.

          I'm supposed to "assign the first IP in my block to an internal interface. Then use that as the gateway for that subnet".

          The way the 1:1 configuration looks seems to best fit that description.

          Alternatively, I could just use the new block of IPs and pretty much ignore the single DHCP reservation I have. 
          I'm still scouring forum posts for something similar to my situation.

          So far I've tried adding a new gateway: system->routing->gateways, but the IP address doesn't lie withing the subnet of the interface. Which makes sense.

          I have to wait for the ISP to now actually route the ips my way.  But I looked at VLANs and the cheap switches I have at home aren't compatible.  So I think that would leave me 1:1 NAT?

          1 Reply Last reply Reply Quote 0
          • C
            cmb
            last edited by

            That's if you want to route public IPs, you don't have to. If you don't have a need to isolate publicly-reachable hosts on a separate NIC or VLAN with the public IP subnet, just add the additional subnet's IPs as Other VIPs and use them with NAT as needed. Or don't need VIPs at all if you're strictly using 1:1 NAT, just setup the 1:1 and you're done.

            1 Reply Last reply Reply Quote 0
            • First post
              Last post
            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.