Navigation

    Netgate Discussion Forum
    • Register
    • Login
    • Search
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search

    Incoming load balance on virtual IP's and 1 real ip

    NAT
    2
    4
    1891
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • N
      Nifa last edited by

      Hi there.
      At first: I'm totally new to unix and firewalling so be patient ;)

      I have to setup a little network and I want to use pfsense (1.0.1). But there are some problems for me:
      1 WAN-Interface, 5 IP's on that interface (I'll have to do it this way, no questions about pls :) )
      4 Servers in LAN, 2 webservers with failover-function 1 mysql and 1 mail

      I'm sitting here and understand not enough to set it up, so any help will be welcome..

      How do I setup the virtual ip's on the wan interface?
      Am I right with:
      Create vlan's for each ip
      Setup virtual ip's and store the values into the created interfaces? (opt1, opt2 and so on)

      For Load balancing I took the documentation on the faq, but nothing seems to work.

      Created pools and NAT entries for the servers, no advanced outbound, so that the outgoing rules are automatically being created
      I created a simple rule in the firewall, which says: From any to any -> pass, which will open the box to the whole world (only for testing purposes, the complete system is in a seperate network ;))

      But I can't ping any server nor ssh' anyone…
      What have I done wrong?

      1 Reply Last reply Reply Quote 0
      • P
        Perry last edited by

        At first: I'm totally new to unix and firewalling so be patient Wink

        Welcome ;) So your reading books and searching the net for basic facts on terms…....  ::)

        I have to setup a little network and I want to use pfsense (1.0.1). But there are some problems for me:

        your should upgrade. http://pfsense.blogspot.com/2007/05/choosing-which-version-to-run.html

        1 WAN-Interface, 5 IP's on that interface (I'll have to do it this way, no questions about pls Smiley )
        4 Servers in LAN, 2 webservers with failover-function 1 mysql and 1 mail

        I'm sitting here and understand not enough to set it up, so any help will be welcome..

        How do I setup the virtual ip's on the wan interface?
        Am I right with:
        Create vlan's for each ip
        Setup virtual ip's and store the values into the created interfaces? (opt1, opt2 and so on)

        To clear this up a bit
        You only got 1 lan nic?
        You have a vlan switch?
        Under virtual ip your add your 4 extra ip's to the wan interface
        after that you nat them ( don't need vlans for that )
        http://doc.m0n0.ch/handbook-single/#id2600401

        For Load balancing I took the documentation on the faq, but nothing seems to work.

        You want incoming load balancing for your webservers? http://wiki.pfsense.com/wikka.php?wakka=IncomingLoadBalancing

        have fun and do it in small steps imo

        /Perry
        doc.pfsense.org

        1 Reply Last reply Reply Quote 0
        • N
          Nifa last edited by

          @Perry:

          Welcome ;) So your reading books and searching the net for basic facts on terms…....  ::)

          Thanx ;)

          @Perry:

          To clear this up a bit
          You only got 1 lan nic?

          No, of course not :)
          I have 2 LAN-Nic's, otherwise load balancing should be hmm, let's say useless? ;)

          @Perry:

          You have a vlan switch?
          Under virtual ip your add your 4 extra ip's to the wan interface
          after that you nat them ( don't need vlans for that )
          http://doc.m0n0.ch/handbook-single/#id2600401

          You want incoming load balancing for your webservers? http://wiki.pfsense.com/wikka.php?wakka=IncomingLoadBalancing

          have fun and do it in small steps imo

          Thx for hint to m0n0wall, doesn't have look on it  ::)

          Ok, I'll give it a try and never forget….
          I'll be back  ;D

          1 Reply Last reply Reply Quote 0
          • N
            Nifa last edited by

            Thx a lot once again Perry, you made my day  ;D

            The real difficult thing was to add the firewall rule for the whole pool :)

            1 Reply Last reply Reply Quote 0
            • First post
              Last post