BGP - OSPF - VLAN's…and everything in between



  • Hi all, I'm a WISP and my current setup is multi-wan, I NAT over 8 load balanced WAN connections, I have 4 VLANS currently configured on my network, one of these I will be using for Captive portal on pfsense (right now it connects to a downstream mikrotik which routes over to my pfsense).

    My future plan is to change over from multi WAN to a single fiber connection, at this point I would like to move over to BGP so that I can give each user their own public IP. The likelihood is that I will need a total of 1000 addresses, so I may twist my ISP's arm so that they can issue me a /20 or /21 depending.

    I've tried to investigate BGP on pfsense but I still have a few questions, if I receive a /21 range from my ISP, can I divide this into 2x /22's so that I can issue a range of addresses for a particular vlan such as my captive portal vlan? I've seen some tutorials where OSPF is needed? In my case I will only be routing out through my pfsense…will I still need to use OSPF for any purposes? Will captive portal work with BGP routed instead of NAT?

    Please excuse my questions if they don't make total sense as I have zero experience with BGP.

    Any help much appreciated.



  • @fusionp:

    Hi all, I'm a WISP and my current setup is multi-wan, I NAT over 8 load balanced WAN connections, I have 4 VLANS currently configured on my network, one of these I will be using for Captive portal on pfsense (right now it connects to a downstream mikrotik which routes over to my pfsense).

    My future plan is to change over from multi WAN to a single fiber connection, at this point I would like to move over to BGP so that I can give each user their own public IP. The likelihood is that I will need a total of 1000 addresses, so I may twist my ISP's arm so that they can issue me a /20 or /21 depending.

    I've tried to investigate BGP on pfsense but I still have a few questions, if I receive a /21 range from my ISP, can I divide this into 2x /22's so that I can issue a range of addresses for a particular vlan such as my captive portal vlan? I've seen some tutorials where OSPF is needed? In my case I will only be routing out through my pfsense…will I still need to use OSPF for any purposes? Will captive portal work with BGP routed instead of NAT?

    Please excuse my questions if they don't make total sense as I have zero experience with BGP.

    Any help much appreciated.

    Unless I misunderstand what you are doing, you don't any routing protocol at all - let your ISP deal with that.

    Simply subnet whatever range your ISP gives you into what ever ranges suit your needs.


Log in to reply