Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

Please bare with my long explanation but this is important to explain the actual problem. Please also pardon my knowledge with PFsense as i am new to

this.

I have single PFSense box with 3 Ethernet adapter. Before moving to configuration for these, i want to let you know i have two Ethernet based

Internet Leased Line Connectivity let's call them ISP A and ISP B. Then last inetrface is LAN which is connected to network switch.

Typical network diagram


ISP A ----->

                            PFSense ----> Switch ---- > Servers

ISP B ----->


ISP A (Initially Purchased)


WAN IP:- 113.193.X.X /29

Gateway IP :- 113.193.X.A

and other 4 usable public IP in same subnet(So the gateway for those IP are also same).

ISP B (Recently Purchased)


WAN IP:- 115.115.X.X /30

Gateway IP :- 115.115.X.B

and other 5 usable public IP in different subnet(So the gateway for those IP is different), for example if 115.119.X.X2 is one of the IP from that

list then the gateway for this IP is 115.119.X.X1.

Configuration for 3 Interfaces


Interface : WAN

Network Port : nfe0

Type : Static

IP Address : 113.193.X.X /29

Gateway : 113.193.X.A



Interface : LAN

Network Port : vr0

Type : Static

IP Address : 192.168.1.1 /24

Gateway : None



Interface : RELWAN

Network Port : rl0

Type : Static

IP Address : 115.115.X.X /30 (I am not sure of the subnet)

Gateway : 115.115.X.B

To use Public IP from ISP A i have done following steps


a) Created Virtual IP using either ARP or IP Alias.

b) Using Firewall: NAT: Port Forward >> i have created specific natting from one public IP to my internal Lan private IP for example :-

WAN     TCP/UDP              *              *              113.193.X.X1      53 (DNS)              192.168.1.5         53 (DNS)

WAN     TCP/UDP              *              *              113.193.X.X1      80 (HTTP)             192.168.1.5         80 (HTTP)

WAN     TCP                        *              *              113.193.X.X2      80 (HTTP)             192.168.1.7         80 (HTTP)

etc.,

c) Current state for Firewall: NAT: Outbound is Manual and whatever default rule are defined for the WAN those are only present.

d) If this section in relevant then for Firewall: Rules at WAN tab then following default rule has been generated.

*              RFC 1918 networks          *              *              *              *              *                              Block private networks                



*              Reserved/not assigned by IANA               *              *              *              *              *              *

To use Public IP from ISP B i have done following steps


a) Created Virtual IP using either ARP or IP Alias.

b) Using Firewall: NAT: Port Forward >> i have created specific natting from one public IP to my internal Lan private IP for example :-

RELWAN              TCP/UDP              *              *              115.119.116.X.X1              80 (HTTP)             192.168.1.11       80 (HTTP)

c) Current state for Firewall: NAT: Outbound is Manual and whatever default rule are defined for the RELWAN those are only present.

d) If this section in relevant then for Firewall: Rules at RELWAN tab then following default rule has been generated.

*              RFC 1918 networks          *              *              *              *              *                             



*              Reserved/not assigned by IANA               *              *              *              *              *              *

Last thing before my actual query is to make you aware

that to have multiple Wan setup i have done following steps


a) Under System: Gateways at Groups Tab i have created new group as following

MultipleGateway WANGW, RELWAN Tier 2,Tier 1
Multiple Gateway Test

b) Then Under Firewall: Rules at LAN tab i have created a rule for internal traffic as follows

*              LAN net                *              *              *              MultipleGateway            none

c) This setup works if unplug first ISP traffic start routing using ISP 2 and vice-versa.


Now my main query and problem is i am not able to use public IP address allocated by ISP B, i have tried many small tweaks but not successful in

anyone. The notable difference between the two ISP is

a) In case of ISP A there Public usable IP address are on same subnet so the gateway used for the WAN ip is same for the other public IP address.

b) In case of ISP B there public usable IP address are on different subnet so the obvious the gateway IP for them is different from WAN gateway's IP.

Please let me know how to use ISP B public usable IP address, in future also i am going to rely for more IPs from ISP B only.

share|improve this question
    
Could you verify your setup using this guide: doc.pfsense.org/index.php/Multi-WAN_2.0 –  MichelZ Jun 21 '12 at 12:11
    
Duplicate post: unix.stackexchange.com/questions/41270/… –  Michael Kjörling Jun 21 '12 at 12:25
    
See, i am new to stack world, i don't know about cross posting, but thanks for knowledge. But could you please let me know where exactly i can ask this question.. else evry other question i will delete. –  user1471995 Jun 22 '12 at 11:06
    
Yes i Have verified my setup, and my Multi WAN setup for internet connectivity to internal computer is running fine. –  user1471995 Jun 22 '12 at 11:07
    
This is a complex enough setup that you really need someone who is very familiar with IP routing to develop, test, and maintain your configuration. –  David Schwartz Jun 24 '12 at 9:40
show 2 more comments

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.