Removing switch from between PfSense and WAN router
tiko last edited by
Last year I started to use the PfSense firewall in our lab environment. I got it to work by adding a switch between PfSense and WAN router because I couldn't figure out how it should be configured without the switch in the PfSense.
Now I have time to do some experiments with the configurations and I have tried with couple of different configurations but none have been successful.
What I want to achieve is to define two IP addresses to PfSense WAN (Public IP and between router and PfSense private IP).
NOW: Public IP1 -> (Public IP2 -> 192.168.250.1) -> 192.168.250.2 -> Internet (Switch in brackets).
TARGET: (Public IP1/192.168.250.1) -> 192.168.250.2 -> Internet (PfSense in brackets).
I have included all the necessary documents and configurations below and in the attachments.
I would be really grateful for any assistance.
ProCurve Switch 2650# sh run Running configuration: ; J4899B Configuration Editor; Created on release #H.10.83 hostname "ProCurve Switch 2650" no web-management no telnet-server ip routing snmp-server community "public" Unrestricted vlan 1 name "DEFAULT_VLAN" untagged 1-48 no ip address no untagged 49-50 exit vlan 100 name "VLAN100" untagged 50 ip address 192.168.250.1 255.255.255.0 exit vlan 200 name "VLAN200" untagged 49 ip address (Public IP x.x.x.x) 255.255.255.240 exit ip route 0.0.0.0 0.0.0.0 192.168.250.2 ```![Lab network problem.png](/public/_imported_attachments_/1/Lab network problem.png) ![Lab network problem.png_thumb](/public/_imported_attachments_/1/Lab network problem.png_thumb)
mikeisfly last edited by
Why not put your publics on your router. Then setup a p2p (/30) between pfsense and your exterior router. Then put private behind pfsense using the switch for your lan(s). You didn't mention what type of router your using but you should easily be able to send pfsense traffic out of one public and use the other public for what you want. How many ports on your router?