Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Setting up devices with static public IP behind pfSense?

    Routing and Multi WAN
    4
    4
    1.5k
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • V
      victorhooi
      last edited by

      Hi,

      We have a pfSense 2.1 firewall that connects to the internet through ADSL2+. The PPPoE authentication is done in pfSense.

      (There are actually two ADSL2+ modems - we're using them in a failover configuration, because the constantly changing IP addresses from load-balancing causes VoIP calls to drop).

      We have several VoIP phones behind the firewall. We've just been allocated additional public static IPs which I'd like to allocate to the VoIP phones. Basically, I'd like them to be completely open to the internet (i.e. pfSense to pass everything through both ways).

      Since the pfSense box is doing the PPPoE authentication, I'm assuming I can't just plug both the phones and pfSense firewall into a single switch, and have that connect to the modem. So the VoIP phones will still need to be behind the pfSense box.

      From reading, it seems the feature I want is Virtual IPs, however, I'm not sure if that's what I want to be using here? Or what's the best way to set this up?

      Or should I set up some kind of 1:1 NAT? What's the correct procedure for doing that?

      Cheers,
      Victor

      1 Reply Last reply Reply Quote 0
      • P
        podilarius
        last edited by

        It really depends on how the new IPs were allocated to you. Are you expected to route them yourself, or are they an extension of the set you already have.
        You probably want 1:1 if they are not routed to you. This way you can open up as much or as little as you want to the phone and the ip address is dedicated to an internal resource (the phone).

        1 Reply Last reply Reply Quote 0
        • K
          kathampy
          last edited by

          How are you supposed to get the additional public IP addresses in the first place? Using multiple PPPoE connections? Or are they routing a subnet to you using the primary PPPoE static IP address as the gateway?

          1 Reply Last reply Reply Quote 0
          • M
            mmidgett
            last edited by

            If you wan't better VOIP then ditch the adsl and go with a cable solution. I had nothing but trouble using my bellsouth business Adsl.

            1 Reply Last reply Reply Quote 0
            • First post
              Last post
            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.