Hot answers tagged

2

On the WAN side of your router, only public addresses exist. The router is performing NAT. You will need to tap on the LAN side of your router to see private IP addresses since the router changes the source addresses of the packets as they travel from LAN to WAN.


2

If your setup is Modem --> Tap --> Router --> Devices Then all you should see is the Public IP because the NAT will take place in the router.


1

The feature you are looking for is "policy based routing" (PBR), so you have to find a router that support it. Product recommendation is off-topic here, but among the various options, you can use a free network OS like VyOs It runs on any x64 platform.


1

I probably misunderstood something but to set static IP you do not need to disable DHCP from the router. Add to the server as many ipv4 ip as you want by going to its advanced settings. I do not even think you'd need to have groups, I'd only use 1 lan for everything (since a router is not a firewall, so I'd not push it too far). Your server would have all ...


1

Yes, bridged mode + PPPoE on a pfSense box should work fine. One notable caveat to test though is that some ISPs who use PPPoE have an MTU blackhole and don't set PPP MTU (some Cisco client equipment fails to negotiate the PPP session if the far end tries to set MTU) and also don't themselves clamp TCP MSS to work around this. Setting your PPP MTU manually ...


1

Frankly, I'm a bit worried that someone managing 100+ computers would ask such a question here. Consider getting professional support. To answer your question: You can configure them anyway you like, it really depends what you are trying to achieve. For example, if you are running an Active Directory on your Windows Server, then the computers within the AD ...


1

Your config is correct to send 993 destined to your WAN IP to 10.0.1.2 port 993. Go through the troubleshooting steps. You can eliminate at least common problems 1, 6, 7, and 10-14 and probably more than that. https://doc.pfsense.org/index.php/Port_Forward_Troubleshooting First I'd filter Diag>States for :993 when trying to connect from the Internet, and ...


1

Public vs private doesn't really matter here, you can use either one. However, I think you'll find that it's very tricky to implement what you're looking for without placing your existing servers into a dedicated subnet, private or public, for which the new server/FW acts as a gateway, because that's the most natural way to get traffic to flow systematically ...



Only top voted, non community-wiki answers of a minimum length are eligible