I have a server in my datacenter that has multiple publicly routed IP addresses, and I'm now running ESXi to manage it.
Before, I had some VMs running under the host that created a network:
inet [x.x.x.210] -- Host OS |-- .211 -- VM 1 \-- .212 -- VM 2
Now, I'd like to do the following under pfSense and VMware:
inet lan [x.x.x.210] -- (NAT) -- [192.168.1.1] |-- .211 -- VM1 |-- .2 -- VM3 \-- .212 -- VM2 \-- .3 -- VM4
Where VM3 and VM4 are getting private IPs NATted by pfSense, and where VM1 and VM2 are still passing through on the same adapter, but are now getting their own public IPs.
I'm having trouble navigating pfSense's interface to figure out how this should be done. Preferentially I'd like the public IPs to still be handed out over DHCP so I can add in a IPv6 tunnel once pfSense supports it. Also, still being able to use pfSense as a firewall would be best, too (otherwise it kind of defeats the purpose)