On Wed, February 3, 2010 1:45 am, Chris Flugstad wrote:
> So I am configuring a pfsense router with public IP's on the lan. Some
> of those public ips are also routers(some pfsense some not) and have
> blocks of ip's of there own on the LAN. What do i need to do on the
> main(1st) router to make sure the blocks on the next routers are routed
> correctly?
>
> I started to make a flow chart and was even confused bout that ;) If
> you understand what I am asking, then great. Much help would be
> appreciated.
>
> -chris
>
Well, if you have a cloud (the internet) incoming on the PFsense box it
works something like this:
[internet] --> [pfsense box external range] --> [internal public ip range]
\---> [internal public ip range]
Etc.
To get that working properly, you will need to add your "communication
network" on the external network, and setup a connectivity lan on your
internal network. If you have 254 machines in that, you could take an /24,
and they could be private IP's for what that's worth (depending on the
needs).
Next: you need to setup routes to the internal gateways for the
appropriate networks.
Imagine your internal connectivity lan is: 10.0.1.0/24, your external
PFsense box is .1, router_2 is .2, router_3 is .3 , yadayada.
Router_2 contains the external entwork 192.168.1.0/24 and router_3
contains the external network 192.168.2.0/24.
On the external PFsense box you need to add two gateways, with the IP
addresses 10.0.1.2 and 10.0.1.3.
Next you need to add the routes:
192.168.1.0/24 points to router_2 (10.0.1.2)
192.168.2.0/24 points to router_3 (10.0.1.3)
Add more networks as you prefer, and create more gateways where needed.
Does this help to get it going?
Cheers,
remko
--
/"\ Best regards, | re...@freebsd.org
\ / Remko Lodder | re...@efnet
X http://www.evilcoder.org/ |
/ \ ASCII Ribbon Campaign | Against HTML Mail and News
---------------------------------------------------------------------
To unsubscribe, e-mail: support-unsubscr...@pfsense.com
For additional commands, e-mail: support-h...@pfsense.com
Commercial support available - https://portal.pfsense.org
