RE: Virtual IP on WAN



  • I want to assign two Ip adresses to the WAN port. Is this possible? If so how do i go about doing it. I tied the obvious virtual ip setup but that doesn't seem to work. If it's suposed to please let me know….

    Any help is appreciated.



  • What's not working? What are you trying to do? Is the second address just another IP in your block, or a different subnet?



  • It's just another IP in my block.

    Example, 192.168.1.2-24 should be able to be added to that interface and can be on a standard machine. I'm wondering how to do that within PFsense?



  • Standard FreeBSD alias addresses are not currently supported in pfSense. You should be able to add additional IPs via Firewall, Virtual IPs. I generally use proxy arp unless it's a CARP cluster, but some people seem to have better luck with CARP addresses. Once the VIP is added, you should be able to use it for a NAT port-forward or 1-1. Things to watch for are that VIPs used for port-forwards will not be pingable, and you must manually create the firewall rules to allow traffic to 1-1 NATs. What in specific was not working when you added a VIP?



  • You just need to add VIP's and configure NAT as you desire.

    If you tried that and it didn't work, likely possibilities:

    • you expected them to respond to pings and they didn't, that's normal.
    • your upstream device on the WAN side had a previously used MAC associated with that IP in its ARP cache
    • you had your NAT and/or VIP's misconfigured


  • When we started to use more than one IP using Virtual IP's we had to clear the ARP cache on the router connected to Pfsense.


Log in to reply