How to configure NAT (and/or routing) to another network on LAN interface
I have the following setup
WAN interface - standard
LAN: 1 interface - 2 networks:
a) 192.168.254.0/24 - computers in LAN
b). 217.x.x.x/27 - VoIP telephones
a network is NATed to the internet in the most standard way
b network does not see the internet, just extenal VoIP provider which is hooked up into the switch with this 217.x.x.x address space.
Both a and b networks are hooked up to the PFsense LAN interface
Pretty recently the old router died and was replaced with PFSense 2.1 appliance
I would like to be able to access the telephones from the computers in LAN (192.168.254.0/24)
Before PFSense I did it in the following way using extra linux box which is in the LAN.
ifconfig eth0:0 217.x.x.60/27 up iptables -t nat -A POSTROUTING -s 192.168.254.0/24 -d 217.x.x.32/27 -j MASQUERADE
and adding extra route to my LAN machines:
route add 217.x.x.32 … 192.168.254.201
where .201 is linux box.
Now the same I would like to achieve via PFSense.
I made the alias via Firewall / Virtual IP and assigned it to LAN with address 217.x.x.60 and now I can ping telephones in 217.x.x.x network from PFSense box. Cannot force PFSense box to nat / route from 192 to 217 though. Could you advice what rules should I apply?
Thank you in advance