I am trying to come up with a way to consolidate two routers into one. I have the following network configuration:
LAN <-- a/24 --> NAT Firewall <-- x/29 --> Router <-- y/30 --> Internet | LAN2 <-- b/24 --> NAT Firewall <---
where a/24 and b/24 are my internal subnets, x/29 is a small block of public IPs we have been assigned, and y/30 is the internet connection supplied by the ISP.
Typically the ISP would own the router, but in this case we will own the NAT firewalls and the router. I'd like to avoid setting up three separate pfSense appliances and want to consolidate the whole thing into something like this:
LAN <-- a/24 --> Firewall/Router <-- y/30 --> Internet | LAN2 <-- b/24 <------
I would still need to be able to assign an address from the x/29 block as the external NAT address for each LAN, and allow port forwarding on those addresses to servers on the LAN (ex: web server).
Is it possible to combine multiple route hops using a single pfSense firewall?
UPDATE: To clarify, the x/29 is routed 'through' the y/30 block from the ISP's standpoint. In other words, the GW for the x/29 is one of the addresses in the y/30 block.