Add /29 block to single WAN with existing /30

mudmanc4

existing WAN ip is in .252 and the new block is in .248

All routed to existing WAN IP by datacenter.

I have added a VIP and a 1:1 IP Alias on WAN /29 IP
(which I did not think was needed since the new block is routed to existing IP) none the less.

Manual outbound NAT to WAN from LAN IP - source *; destination /29 IP ; dest port *; NAT port *;

Added Port forwards for HTTP from VIP to LAN IP

What am I missing here, I cannot get access from external IP in any sense.

Trying to accomplish static IP's to virtual machines on LAN.

mudmanc4

Ended up using proxy arp to make it work. Not sure if this is the correct way to do this, none the less, unless someone has a better way ?

Thanks

mudmanc4

I lie - I used IP Alias - the reboot is what made it come together.

Again though if anyone has a better approach I'm all ears.

Thanks

eshield

Well, you can bridge WAN and LAN … so you'll be able to assign routed IP to any intranet pc. Never tried this myself but I think it should work. There is a possibility that you'll lose some functionality but I'm not sure.

mudmanc4

@eshield:

Well, you can bridge WAN and LAN … so you'll be able to assign routed IP to any intranet pc. Never tried this myself but I think it should work. There is a possibility that you'll lose some functionality but I'm not sure.

Thanks shields, not sure if I want to try something like this though. Keeping all ports and traffic separate is key here, as each IP points to a single container on one of various nodes. As it stand at the moment port holes are punched defined to a specific VM / node.

I just always look to insure not only usability / connectivity is there, but security and proper formation. As at some point soon I'll need to add a switch and separate with vlans, which attempting to bind such interfaces would be something not in my realm of sanity.

Thanks, Rick