Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Addional WAN subnet trough same WAN connection - VIP/IP Alias? - SOLVED

    Scheduled Pinned Locked Moved HA/CARP/VIPs
    2 Posts 1 Posters 903 Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • J
      jmack
      last edited by

      Hi,

      Got from my ISP an extra, routed subnet /29. How to get this work?

      Current setup is:

      • Server with multiple NIC's and Pfsense 2.2.4
      • WAN via PPPoE/VLAN6 (Fiber)
      • Single ext WAN IP 80.100.x.x
      • The additional /29 subnet is offered routed trough the same pipe, they say.
          (New subnet is: 80.127.x.x/29)
      • I own the Pfsense book 2.1, but can't find there something to solve this with it

      What I have done/tried:
      I have added Virtual IP's as IP Aliases /32.

      • Tried to use it in 1:1 NAT 
          ==> ExtIP/VIP to local IP)  This blocks somewhere…
      • Tried to do AON - Advanced Outbound NAT
          ==> WAN local_IP * * * VIP * NO      This blocks somewhere...

      Questions:

      • How to get it to work with 1:1 NAT single local IP, and AON with /24 LAN subnet
      • Should current working firewall rules being updated? Have now ==> LAN IPv4 * local_single_IP * * * * none
      • I suspect that FW rules do not accept or recognize the new subnet IP's somehow ==> "Default deny rule IPv4"
      • Is "IP alias" the right VIP to use?
      • Some people have added an extra WAN gateway for all this, tried this but then my current GW seems to disappear.
          And some pro's here suggested that this is not needed in 2.1/2.2 anymore... Extra GW or not?

      I have used /29 subnet before, but then as main WAN IP subnet. Working fine. Not as addional Subnet besides single WAN IP.

      1 Reply Last reply Reply Quote 0
      • J
        jmack
        last edited by

        Reboot of server did the job.
        ISP did not release the subnet untill a restart of WAN via PPPoE.

        1 Reply Last reply Reply Quote 0
        • First post
          Last post
        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.