How to make ip alias??

agismaniax

I have pfSense on my machine equipped with 6 NICs; nve0, ste0, ste1, ste2, ste3 and wb0.
nve0 is 172.16.4.254/16 (LAN example)
ste0 is 123.123.123.123 (WAN example)
ste1 is 132.132.132.132 (WAN2 example)

I want to add another ip alias for LAN, WAN and WAN2 to this following setting:
nv0 are 172.16.4.254/16, 172.16.4.17/24, 172,16,4,7/24 172.16.4.38/24
ste0 are 123.123.123.123/30, 123.123.123.124/30, 123.123.123.125/30
ste1 are 132.132.132.132/30, 132.132.132.133/30, 132.132.132.134/30

How to do that in pfSense?
I'm trying with "Firewall -> Virtual IPs" still now working.

regards,
Agi

hoba

I would suggest using Virtual IPs of type CARP. This way you can easily expand your setup later by adding a failovermachine without converting your complete config. Depending on how you want to set this up and what you want to do with the additional IPs you need portforwarding, 1:1 NAT, advanced outbound NAT and appropriate firewallrules (or a combination of some of these items at least). If you tell us what you want to do with the additional IPs we can give you further advise.

agismaniax

Currently I have 3 gateway to internet and in the future we are going to have for internet gateway.
Each internet gateway using its own firewall, which are:
firewall #1: 172.16.4.7
firewall #2: 172.16.4.17
firewall #3: 172.16.4.38

I have configure pfsense 1.0 beta in my machine, equipped with 6 NICs (nv0, ste0, ste1, ste2, ste3, wb0).
My LAN probed as nv0 and assign with ip 172.16.4.254. So i need to make another ip alias for that interface and the user shouldn't change gateway setting in their TCP/IP properties.

And for my WAN interface, I have 3 blocks of public IP.
WAN #1: 203.77.230.xxx/29 (assign on ste0)
WAN #2: 202.169.57.xxx/29 (assign on ste1)
WAN #3: 202.159.10.xxx/29 (assign on ste2)
WAN #4: TBA (assign on ste3)

I want to use those IPs for each internet service in my company.
For example, I want to use:

IP 203.77.230.1, 202.169.57.1 and 202.159.10.1 for my FTP, DNS and HTTP service.
IP 203.77.230.2, 202.169.57.2 and 202.159.10.2 for my SMTP and POP3 service.

I'm trying with CARP or Other in Virtual IPs and still not able to port scan that IPs.

How to that in pfsense? ??? ??? ???

Btw. in the future, i'm going to use latest NIC (wb0) to use as failover interface.