2 pfsense, different LAN:s but WAN on same subnet (SOLVED)



  • We're replacing our 2 IPcop:s with pfsense, the 2 firewalls protects different LAN:s.
    We have several public ip:s in 3 subnets, they all come in on one line from isp to our switch:
    10.10.65.212/29 - to fw1, WAN adress here
    10.10.48.41/29 - to fw2, WAN adress here
    10.10.189.73/29 - here's the problem!
    Today:
    10.10.189.74/29 - to fw1 (pfsense, VirtualIP)
    10.10.189.76/29 - to fw2 (IPCop, eth2:0)

    Now we want to have ip 10.10.189.75 on a third firewalls (fw3) WAN - this is a pfsense-box to replace the IPCop box with after testing.
    But this doesn't work - all traffic to 10.10.189.75  goes to fw1. (10.10.189.76 correctly goes to fw2.)
    I suppose this is a pretty simple issue, just can't figure out the best way to fix it?
    Different masks, add routing (for one host??), not use VirtualIP but … ?



  • I gave this a second thought, and realized this just can't be possible!
    So down to the cellar again, testing a third cable and another port on the switch - now it works!

    Nothing wrong with config, most likely the switch "remembering" where that host is. (Sometimes I miss those good ol' hubs!  ;) )


Log in to reply