Pfsense 2.3 manually add vip alias



  • Can someone let me know how i can add multiple virtual ip alias using command line on version 2.3?
    I also wanted to rearrange some of the ip address i initially added.

    Thanks!!



  • I manage to be able to re-arrange my public ip/vip block by editing the /cf/config/backup/config-xxxxxxxxxx.xml and
    do a 15) Restore recent configuration option in the console menu and restore the edited file.

    I also was able to manually add my public ip using the same method but i'm concern about the uniqid area and if it have any significant within the firewall.

    <virtualip><vip><mode>ipalias</mode>
    <interface>wan</interface>

    <type>single</type>
    <subnet_bits>32</subnet_bits>
    <subnet>x.x.x.98</subnet></vip>
    <vip><mode>ipalias</mode>
    <interface>wan</interface>

    <descr><type>single</type>
    <subnet_bits>32</subnet_bits>
    <subnet>x.x.x.99</subnet></descr></vip>
    <vip><mode>ipalias</mode>
    <interface>wan</interface>

    <type>single</type>
    <subnet_bits>32</subnet_bits>
    <subnet>x.x.x.100</subnet></vip></virtualip>

    Any help would be greatly appreciated,



  • There has to be a uniqid defined that's unique on every VIP or they won't work correctly. Should be able to edit and save them all to have that added. Otherwise add input of PHP's uniqid(). Diag>Command, in PHP Execute, paste in:

     var_dump(uniqid());
    

    to generate one. It's just a random string matching that length.



  • Many, many thanks for this hint. :)

    I have been trying to figure out what went wrong, when i set the carp-IPs via developer shell.

    If the uniqid is not set you will not be able to set the Interface within RA-Advertisments.
    The address from which it should be send (e.g. LAN, CARP-IP) is simply missing. (2.3.2)