OK it's complicated… In our University we have old gateway on FreeBSD. So we want to change it whit pfSense whit identical configuration... see the attached picture for the configuration..
Sooo we have on Gate:
1 WAN port and 2 Lan ports
Our organization have 2 public network address ranges... something like 194.141.252.x and 194.141.2.x . On WAN port of GW is added the 220.127.116.11x (may be untagged VLAN) address, but we go out whit the public address 18.104.22.168 (if make who is check 22.214.171.124 appear).
Behind the GW we have a Microtic machine that manage traffic for students which authenticate through it to a remote RADIUS server. The RADIUS server is over Internet! We need to manage all requests and traffic to use 126.96.36.199 like public (students use 10.5.50.x IP's)! Wi-Fi clients communicate through LAN by a gigabit switch- access points communicate via VLAN whit 10.0.56.x and then clients use address range IP from 10.5.50.x
The problem is that in the old configuration (the working configuration! :) ) the guy who make all, he use a same IP address 188.8.131.52 for inbound port on Microtic machine and we need to use that IP like public ?!? ??? Very confusing for me... :-\
If u ask why need that.. because if some one from other University came to our Uni, he can enter whit his User and Pass to Wi-Fi .
So how to manage this configuration on pfSense? Any ideas will be helpful!
cneep last edited by
The problem is that in the old configuration (the working configuration! :) ) the guy who make all, he use a same IP address 184.108.40.206 for inbound port on Microtic machine and we need to use that IP like public ?!?
I don't quite understand your network, but according to your picture, the Microtic is using 220.127.116.11 and not 18.104.22.168.
You're right: Having 22.214.171.124 on the Microtic would probably conflict with one of the public addresses on your gateway. But 126.96.36.199 (as the picture indicates) would not.
If the network configuration is working now and the addresses in the picture are correct, then perhaps are you're (understandably) overwhelmed and simply confusing the 192. and 194. addresses…?
Thanks for answer cneep.
I have typed wrong… it's 194 not 192. When change the IP on Microtik on other like 188.8.131.52 when i make "who is" search from Internet he goes out through GW whit same IP address. Don't know why is that.
I already managed to make everyone from my LAN to go out whit what IP i want.
OK i tray to make NAT.. but may be not in right way.
How to make a NAT 1:1, all local network addresses to go out from one public IP, but not to use the "any" option?
x.x.x.1 ip WAN <=> go out IP's from LAN
x.x.x.2 ip WAN <=> go out IP,s from OPT 1
PS: there is only one WAN interface!