Good to hear you got it going Dave,

Jai, 
you will want to set them up with a /32
if proxy arp isn't working you can also try carp. 
I suppose it COULD be a faulty NIC, but give the above a shot.
and do power down the router/or modem (whichever the case) between each shot.

-Tim

-----Original Message-----
From: jai lamerton [mailto:[EMAIL PROTECTED]
Sent: Tue 7/3/2007 9:24 PM
To: support@pfsense.com
Subject: Re: [pfSense Support] Multiple IPs
 
Hi Tim,

Thanks for the info... I have tried what you mentioned to no avail,  
I'm not sure my failure is due to an arp cache problem with the  
router (although i did suspect that) because connecting a laptop to  
the subnet and changing it's IP address has no problems, and there is  
no delay while arp timeouts. Same is true if I change the WAN IP  
address to any of the other IP's in the subnet.

I wonder if I'm configuring the virtual IP wrong. I've been entering  
the IP address as "Single addresses", ie /32 bit mask. Could it be  
the hardware?

Jai

On 04/07/2007, at 11:26 AM, Tim Dickson wrote:

> The IP's are in the same subnet right?
> If you can use the ip's bypassing pfSense, then pfSense can use the
> IP's.
>
> Add them to the Virtual IP's list, apply your settings and then reboot
> the router (not pfSense, fyi...maybe that is where you have been  
> stuck)
>
> What this does is pfSense now answers for the IP's you've added to the
> list. If they are usuable, then pfSense will respond to them.  IF you
> are still having trouble, power down your router for a longer  
> period of
> time.  It is necessary for it to clear it's cache and resend it's arp
> requests so pfSense can respond.
>
> I guarantee it is not an issue with pfSense I have it working on every
> install I've done (that needed multiple IP's that is)
> -Tim
>
> -----Original Message-----
> From: Dave Cabot [mailto:[EMAIL PROTECTED]
> Sent: Tuesday, July 03, 2007 6:10 PM
> To: support@pfsense.com
> Subject: RE: [pfSense Support] Multiple IPs
>
> Didn't work.  What can we do to collect info in order to determine  
> what
> the
> actual problem is?  If it's the kernel, we need to know so a patch may
> be
> done.
>
> Dave
>
> -----Original Message-----
> From: Tim Dickson [mailto:[EMAIL PROTECTED]
> Sent: Tuesday, July 03, 2007 4:40 PM
> To: support@pfsense.com
> Subject: RE: [pfSense Support] Multiple IPs
>
> And be sure to reboot your router!  Sometimes the cache time is
> reallllly
> long -tim
>
> -----Original Message-----
> From: Dave Cabot [mailto:[EMAIL PROTECTED]
> Sent: Tuesday, July 03, 2007 3:16 PM
> To: support@pfsense.com
> Subject: RE: [pfSense Support] Multiple IPs
>
> I did try that and as you said, it doesn't work.  I'm going to try to
> switch
> interfaces and see if it'll work on the vr0 device.  (currently  
> using a
> rl0).
>
> Thanks,
> Dave
>
> -----Original Message-----
> From: jai lamerton [mailto:[EMAIL PROTECTED]
> Sent: Tuesday, July 03, 2007 12:37 AM
> To: support@pfsense.com
> Subject: Re: [pfSense Support] Multiple IPs
>
> Dave, its under firewall->Virtual IP's
>
> It's interesting but as I mentioned before I tried to get proxy ARP to
> work
> but couldn't get pfsense to respond to "who has" arp requests for  
> any IP
> other than the WAN.
>
> Does anyone know if some network cards are just so shitty (rl0) that
> they
> will now work with proxy ARP?
> I would assume it has to do with the kernel and not the network card.
>
> On 03/07/2007, at 1:41 PM, Dave Cabot wrote:
>
>> How do I do that exactly?  I thought ARP was self-discovery.
>>
>> Dave
>>
>> -----Original Message-----
>> From: Tim Dickson [mailto:[EMAIL PROTECTED]
>> Sent: Monday, July 02, 2007 8:13 PM
>> To: support@pfsense.com
>> Subject: RE: [pfSense Support] Multiple IPs
>>
>> You will need to set arp up because your firewall needs to say "hey
>> I'm here... send these packets to me"
>> After you do that you may need to power cycle your router to clear
>> it's arp cache.
>> It works great... use it on all my sites.
>> -Tim
>>
>> -----Original Message-----
>> From: jai lamerton [mailto:[EMAIL PROTECTED]
>> Sent: Monday, July 02, 2007 5:22 PM
>> To: support@pfsense.com
>> Subject: Re: [pfSense Support] Multiple IPs
>>
>> I was unsuccessful in achieving this type of setup, which is strange
>> as it seems it should be very possible.
>> According to that link I don't need to add the IP addresses as proxy
>> ARP, It should just work with 1:1 NAT. I might have another go with
>> just the NAT.
>>
>> I would be interested to know how you went.
>>
>> Cheers.
>>
>> On 03/07/2007, at 2:29 AM, sai wrote:
>>
>>> On 7/2/07, Dave Cabot <[EMAIL PROTECTED]> wrote:
>>>> How does pfS handle multiple IPs on the WAN interface?  Would it
>>>> just be filter rules or the port fowarding?
>>>>
>>>> My ISPs gateway will be x.x.x.145.  I've got x.x.x.146-x.x.x.150
>>>> (netmask
>>>> 255.255.255.248)  I'll set the WAN port to x.x.x.150, but I need it
>>>> to receive the packets for all 5 IPs.  I need to be able to forward
>>>> based off of IP and port to whatever server inside the LAN.  Is  
>>>> this
>
>>>> doable?
>>>>
>>>>
>>>
>>> Its doable. See http://doc.m0n0.ch/handbook/examples.html#id2603650
>>>
>>> pfSense is based on m0n0 and this should help you get started.
>>>
>>> -------------------------------------------------------------------- 
>>> -
>>> To unsubscribe, e-mail: [EMAIL PROTECTED] For
>>> additional commands, e-mail: [EMAIL PROTECTED]
>>
>> ---------------------------------------------------------------------
>> To unsubscribe, e-mail: [EMAIL PROTECTED] For  
>> additional
>
>> commands, e-mail: [EMAIL PROTECTED]
>>
>>
>>
>> ---------------------------------------------------------------------
>> To unsubscribe, e-mail: [EMAIL PROTECTED] For  
>> additional
>
>> commands, e-mail: [EMAIL PROTECTED]
>>
>>
>> ---------------------------------------------------------------------
>> To unsubscribe, e-mail: [EMAIL PROTECTED] For  
>> additional
>
>> commands, e-mail: [EMAIL PROTECTED]
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: [EMAIL PROTECTED] For additional
> commands, e-mail: [EMAIL PROTECTED]
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: [EMAIL PROTECTED] For additional
> commands, e-mail: [EMAIL PROTECTED]
>
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: [EMAIL PROTECTED] For additional
> commands, e-mail: [EMAIL PROTECTED]
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]




---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


<<winmail.dat>>

---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to