Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    1 wan, 3 lans; 3 lan subnet on one interface howto

    Scheduled Pinned Locked Moved Routing and Multi WAN
    5 Posts 4 Posters 2.8k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • T
      tammer
      last edited by

      I have a big question. How can I realize the following system with pfsense, without a vlan switch?
      I have a single uplink with fixed ip. I wanna make 3 lan networks on one interface (In the cmts I have only 1 network socket)
      (The cmts is only a bridge, not a router):
      My pfsense box is x.y.25.2/24 (wan) and 10.0.0.1 (lan)
      1. 10.0.1.0/24 for my cable modems and my cmts [gw must be my pfsense]
      2. 10.0.0.0/24 for my subscribers (these addresses are assigned to the computers) - that's OK, it's the basic config!
      3. x.y.25.0/24 public ip address range for my subscribers, who have special requests. [gw must be my pfsense box]

      Thank you for your help.

      1 Reply Last reply Reply Quote 0
      • C
        cmb
        last edited by

        Multiple IP subnets on the same broadcast domain is a bad idea and not supported. You need a physical interface or VLAN interface for each subnet.

        1 Reply Last reply Reply Quote 0
        • T
          tacfit
          last edited by

          lol, buy a VLAn switch. They're not too much, and you'd only need to cover 4 ports. 3 ports are dedicated to their appropriate VLANs, and then the last is tagged with each, and connected to your pfSense box. It's a better setup.

          1 Reply Last reply Reply Quote 0
          • P
            Pootle
            last edited by

            Definitely separate the subnets - linksys have just launched a new cheap switch with VLAN capability (slm2005 / slm2008) cheapest I've so far seen

            1 Reply Last reply Reply Quote 0
            • T
              tacfit
              last edited by

              Wow, that is cheap. VLAN capability seems to be what separates the boys from the men, so to speak. The prices tend to jump like crazy.

              I actually recommened pfSense in a VM on a Dell desktop for someone recently, and it this option was cheaper than a decent router with VLAN abilities. (And I've convinced it will be more flexible, also) Go pfSense!

              1 Reply Last reply Reply Quote 0
              • First post
                Last post
              Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.