How to add 5 routable IP's and assign one to a server
I need you advice with this, I have 5 static IP's from my ISP, I want to add this IP's to PFSense and assign some of them to different servers, I read that I could use 1:1 but I don't know how to add the 5 IP's to PFSense.
Your advice will be appreciate.
KOM last edited by
You do it via Virtual IPs (Firewall - Virtual IP). Add an IP Alias for every public IP address that is not your WAN. Then you can port-forward your servers to those IPs. Don't use 1:1 NAT unless you need to expose the entire server. For example, if you want to provide access to a web server, do a port-forward for ports 80,443 from one of your virtual IPs to the LAN IP of the web server.
Thank you for your answer, I will be renting some VPS to some clients, I guess I need to do 1:1, do you know if is possible to configure the external IP into an internal server? like eth0 configuring by DHCP one of this externals IP?
witch one of this should I use?
Depends on how you want them to behave.
As for assigning public IP addresses directly to a server behind your firewall, you can't.
You would want to talk to your upstream and get another subnet routed to an address on your /29. You would then create an interface on pfSense with that network on it.
Thank you for your answer.
Do you know how does ISP to assig the IP's to the servers?
I am renting a VPS and they have the external IP configured in the VPS and a internal IP, I was asking if somebody knows how some of these companies do that.
Proper routing of IP addresses to VMs.
Could you give me some examples of routing to have the public IP locally in the VPS or a URL with the explanation?
Your colo provides a /29. Call it 126.96.36.199/29
You configure your pfSense WAN like this:
Your colo routes the following to 188.8.131.52: 184.108.40.206/24
You configure OPT1:
You disable outbound NAT for OPT1
You tag the OPT1 network to the vswitch that's supposed to have the Real IPs for VMs.
VMs use 220.127.116.11 as the default gateway.
Thank you for your answer