Use 2 PFSense to have more than one public adress ?

Guldil

Hi,

Here's my goal :

I have one site with pfsense 2.0.1, it's use WAN with Dynamic IP andi have to open 2 Websites with SSL (IIS 7.5 & Exchange 2010).
I have some vmware esx in a datacter with public RIPE available, and i have a working pfsense too.
Is this possible to redirect traffic from my pfsense "vmware" to my local pfsense ?
I tried with ipsec or gre interface and it's not working…

May be it's not possible ?

Thanks

Guldil

sash99

when I had internal web servers couple years ago i believe I used 1:1 nat it passed through to the pfsense behind 12 public ips behind it.. but I had unusual masking from my provider. our server had 13 public ips the pfsense had x.x.x.66/30 and a gateway. x.x.x65 the public ips range was x.x.x.81 - 94.. but I also had to configure pfsense in a different way than it allowed at that time

snippet of what i had to do at that time
I had a linux box at that time and was changing over to pfsense and what i had to do to get it to work in pfsense

linux routing table
XX.xx.XX.64 0.0.0.0 255.255.255.252 U 0 0 0 eth0
xx.xx.XX.80 0.0.0.0 255.255.255.240 U 0 0 0 eth1
172.16.0.0 0.0.0.0 255.255.255.0 U 0 0 0 eth1

virtual lan on eth1
ip XX.XX.XX.81
subnet 255.255.255.240
broadcast xx.xx.xx.95

and lan eth0 – (wan)
ip xx.xx.XX.66
subnet mask 255.255.255.252
broadcast xx.xx.xx.255

pfsense routing table
IPv4
Destination Gateway Flags Refs Use Mtu Netif Expire
default xx.xx.xx.65 UGS 0 1427 1500 vr0
127.0.0.1 127.0.0.1 UH 0 0 16384 lo0
172.16.0.0/24 link#1 UC 0 0 1500 xl0
172.16.0.73 6c:f0:49:42:64:2b UHLW 1 374 1500 xl0 1174
xx.xx.xx.64/30 link#2 UC 0 0 1500 vr0
xx.xx.xx.65 link#2 UHLW 1 68 1500 vr0
xx.xx.xx.66 00:0d:87:04:07:25 UHLW 1 51 16384 lo0
xx.xx.xx.80/28 link#7 UC 0 0 1500 vlan0

example :
ifconfig re0 172.16.16.66/30 broadcast 172.16.16.255
this way every time you restart... you reboot with the proper configurations.
problem after reconfiguration you may need to reboot so things are working properly. (
when setting up your wan,lan or opt within pfsense set it to the basic ( internet capable setting or network what ever your network priority is)
in this case with the above example it would be 172.16.16.66/24.. ( since these special broadcast configuration in my case only allow multiple ip pass through pfsense-- but if I need the pass through priority then I set it at 172.16.16.66/30 then these ips will remain functional )

but I think this is not what your asking i think you have one public IP and trying to divide between two pfsense routers and several servers behind that. I think the only way your going to get that work is port forwarding .. and then using domain service to give it user friendly names

Guldil

I don't know how to explain…

Just imagine one pfsense with 2 Public WAN IP and PPTP Server.
I have another site with a WebServer.
This Webserver connect to my pfsense with PPTP Client and the traffic for port 80 of the second WAN IP is redirected to the PPTP Client ?

PPTP Server is just an example, it could be OpenVPN or a direct "tunnel" between the router.