Ok, she's working. Thanks guys, esp Tim.
Dave
-----Original Message-----
From: Dave Cabot [mailto:[EMAIL PROTECTED]
Sent: Tuesday, July 03, 2007 10:20 PM
To: [email protected]
Subject: RE: [pfSense Support] Multiple IPs
Let me be pedantic.
By router maybe you mean the modem that's upline of the firewall.
Pls let
me know.
Also, let go over some of the details of my config so you can tell
me if
I've done something stupid:
In Interfaces | WAN I have the IP address configured as X.X.X.
146/29 and the
gateway x.x.x.145.
In Firewall | Virtual IPs I have four defined:
X.x.x.147/32 Proxy ARP
X.x.x.148/32 Proxy ARP
X.x.x.149/32 Proxy ARP
X.x.x.150/32 Proxy ARP
Now, assuming that I've done this correct, I've added some Firewall
| NAT |
Port Forwards based off of the Virtual IP & port.
If all this is correct, then all I should have to do is reboot the
ISP's
modem.
Dave
-----Original Message-----
From: Tim Dickson [mailto:[EMAIL PROTECTED]
Sent: Tuesday, July 03, 2007 7:27 PM
To: [email protected]
Subject: RE: [pfSense Support] Multiple IPs
The IP's are in the same subnet right?
If you can use the ip's bypassing pfSense, then pfSense can use the
IP's.
Add them to the Virtual IP's list, apply your settings and then
reboot the
router (not pfSense, fyi...maybe that is where you have been stuck)
What this does is pfSense now answers for the IP's you've added to
the list.
If they are usuable, then pfSense will respond to them. IF you are
still
having trouble, power down your router for a longer period of
time. It is
necessary for it to clear it's cache and resend it's arp requests
so pfSense
can respond.
I guarantee it is not an issue with pfSense I have it working on every
install I've done (that needed multiple IP's that is) -Tim
-----Original Message-----
From: Dave Cabot [mailto:[EMAIL PROTECTED]
Sent: Tuesday, July 03, 2007 6:10 PM
To: [email protected]
Subject: RE: [pfSense Support] Multiple IPs
Didn't work. What can we do to collect info in order to determine
what the
actual problem is? If it's the kernel, we need to know so a patch
may be
done.
Dave
-----Original Message-----
From: Tim Dickson [mailto:[EMAIL PROTECTED]
Sent: Tuesday, July 03, 2007 4:40 PM
To: [email protected]
Subject: RE: [pfSense Support] Multiple IPs
And be sure to reboot your router! Sometimes the cache time is
reallllly
long -tim
-----Original Message-----
From: Dave Cabot [mailto:[EMAIL PROTECTED]
Sent: Tuesday, July 03, 2007 3:16 PM
To: [email protected]
Subject: RE: [pfSense Support] Multiple IPs
I did try that and as you said, it doesn't work. I'm going to try
to switch
interfaces and see if it'll work on the vr0 device. (currently
using a
rl0).
Thanks,
Dave
-----Original Message-----
From: jai lamerton [mailto:[EMAIL PROTECTED]
Sent: Tuesday, July 03, 2007 12:37 AM
To: [email protected]
Subject: Re: [pfSense Support] Multiple IPs
Dave, its under firewall->Virtual IP's
It's interesting but as I mentioned before I tried to get proxy ARP
to work
but couldn't get pfsense to respond to "who has" arp requests for
any IP
other than the WAN.
Does anyone know if some network cards are just so shitty (rl0)
that they
will now work with proxy ARP?
I would assume it has to do with the kernel and not the network card.
On 03/07/2007, at 1:41 PM, Dave Cabot wrote:
How do I do that exactly? I thought ARP was self-discovery.
Dave
-----Original Message-----
From: Tim Dickson [mailto:[EMAIL PROTECTED]
Sent: Monday, July 02, 2007 8:13 PM
To: [email protected]
Subject: RE: [pfSense Support] Multiple IPs
You will need to set arp up because your firewall needs to say "hey
I'm here... send these packets to me"
After you do that you may need to power cycle your router to clear
it's arp cache.
It works great... use it on all my sites.
-Tim
-----Original Message-----
From: jai lamerton [mailto:[EMAIL PROTECTED]
Sent: Monday, July 02, 2007 5:22 PM
To: [email protected]
Subject: Re: [pfSense Support] Multiple IPs
I was unsuccessful in achieving this type of setup, which is strange
as it seems it should be very possible.
According to that link I don't need to add the IP addresses as proxy
ARP, It should just work with 1:1 NAT. I might have another go with
just the NAT.
I would be interested to know how you went.
Cheers.
On 03/07/2007, at 2:29 AM, sai wrote:
On 7/2/07, Dave Cabot <[EMAIL PROTECTED]> wrote:
How does pfS handle multiple IPs on the WAN interface? Would it
just be filter rules or the port fowarding?
My ISPs gateway will be x.x.x.145. I've got x.x.x.146-x.x.x.150
(netmask
255.255.255.248) I'll set the WAN port to x.x.x.150, but I need it
to receive the packets for all 5 IPs. I need to be able to forward
based off of IP and port to whatever server inside the LAN. Is
this
doable?
Its doable. See http://doc.m0n0.ch/handbook/examples.html#id2603650
pfSense is based on m0n0 and this should help you get started.
--------------------------------------------------------------------
-
To unsubscribe, e-mail: [EMAIL PROTECTED] For
additional commands, e-mail: [EMAIL PROTECTED]
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED] For
additional
commands, e-mail: [EMAIL PROTECTED]
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED] For
additional
commands, e-mail: [EMAIL PROTECTED]
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED] For
additional
commands, e-mail: [EMAIL PROTECTED]
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED] For additional
commands, e-mail: [EMAIL PROTECTED]
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED] For additional
commands, e-mail: [EMAIL PROTECTED]
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED] For additional
commands, e-mail: [EMAIL PROTECTED]
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED] For additional
commands, e-mail: [EMAIL PROTECTED]
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED] For additional
commands, e-mail: [EMAIL PROTECTED]
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED] For additional
commands, e-mail: [EMAIL PROTECTED]
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
