I have from my ISP a static address (say as well as a range of 2 hosts I get handed the first static address when I connect via PPPoE.

I have added a virtual IP entry in pfSense | Firewall: proxy ARP with the range. From the outside I can ping one of my hosts in the range, i.e. ping works.

But I cannot figure out how to setup a NAT port forward so that I can reach an internal webserver from the outside over one of the two range host IP addresses? I don't want to use NAT 1:1 because I mostly want to have multiple port 80 to the same web server.


In proxy ARP write the second staticIP/30.

  • This does not provide an answer to the question. Once you have sufficient reputation you will be able to comment on any post; instead, provide answers that don't require clarification from the asker. - From Review – Thomas Jan 10 '18 at 5:08
  • Thomas this is the solution that does not need clarification. Before commenting randomly, try it. – Alessandro Secchi Jan 10 '18 at 8:27
  • @AlessandroSecchi OP here, (completely forgot about this question). I have no idea where to set the proxy ARP. There's the ARP table in diagnostics, but it doesn't mention proxy, and shouldn't a secondary static IP be a function of the WAN interface? – erict Jan 29 at 18:42

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.