How to configure NAT (and/or routing) to another network on LAN interface

[norbi771]

Hello,

I have the following setup

WAN interface - standard
LAN: 1 interface - 2 networks:
a) 192.168.254.0/24 - computers in LAN
b). 217.x.x.x/27 - VoIP telephones

a network is NATed to the internet in the most standard way
b network does not see the internet, just extenal VoIP provider which is hooked up into the switch with this 217.x.x.x address space.

Both a and b networks are hooked up to the PFsense LAN interface

Pretty recently the old router died and was replaced with PFSense 2.1 appliance

I would like to be able to access the telephones from the computers in LAN (192.168.254.0/24)

Before PFSense I did it in the following way using extra linux box which is in the LAN.

ifconfig eth0:0 217.x.x.60/27 up
iptables -t nat -A POSTROUTING -s 192.168.254.0/24 -d 217.x.x.32/27 -j MASQUERADE

and adding extra route to my LAN machines:
route add 217.x.x.32 … 192.168.254.201

where .201 is linux box.

Now the same I would like to achieve via PFSense.
I made the alias via Firewall / Virtual IP and assigned it to LAN with address 217.x.x.60 and now I can ping telephones in 217.x.x.x network from PFSense box. Cannot force PFSense box to nat / route from 192 to 217 though. Could you advice what rules should I apply?

Thank you in advance

Best regards
Norbert